Industry Report Claims Threats to ICS Will Present a Greater Challenge in 2022
Issue
30 November 2021
Editor
Dan McCarthy
Editor in Chief
Amery Smock
Date
11/23/2021
-
Analysis
According to a Kaspersky report, cybercriminals in 2021 compromised thousands of industrial organizations worldwide and 2022 may present even more of a challenge. For some of these organizations, the consequences of a security compromise in 2021 may not actually catch up with them until 2022, the report claims.
The report points out that to counter detection, cybercriminals are adopting the strategy of frequently upgrading malware in their chosen family. They use malware at its peak effectiveness to break through the defenses of security solutions and then switch to a new build as soon as the current one becomes readily detectable. The evolution of modern malware-as-a-service platforms makes it much easier for malware operators globally to use this strategy [1].
Industry must take notice of attackers adopting initiatives to reduce the number of targets per individual attack, decrease the life cycle of malware, minimize the use of malicious infrastructure, and realize that modern advanced persistent threats are more persistent than advanced in nature. We recommend reviewing the trends and attack vectors contained in the report. -
Sources
[1] Kaspersky Report on Threats to ICS in 2022 https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-threats-to-ics-and-industrial-enterprises-in-2022-En.pdf
Analyst