November 2015 Cyber Attacks Statistics

Finally, I had time to aggregate the two timelines of November (Part I and Part II) into statistics.

As usual let’s start from the Country Distribution Chart, which, once again, sees the US on top in all the main sectors. UK and AU emerge over the other countries for what concerns Cybercrime, whereas Israel was one of the preferred targets for Hacktivists (the N/A refers to the campaigns against ISIS-related targets).  The only countries appearing in the Cyberwarfare sector are India and Pakistan, which continue to fight their personal cybewar.

November 2015 Countries

The Daily Trend of Attacks chart shows a prominent activity in the first half of the month, with a peak concentrated around the 10th. In the second half the trend seems more stable, showing a general decrease, with some peaks that are always in the work days (the crooks seem to have some rest during the weekends).

November 2015 Trend

As usual, Cybercrime dominates the Motivations Behind Attacks chart, with a remarkable 69.7% (was 68% in October) that sets a new record (this month has seen an unprecedented number of DDoS-based ransoms). Hacktivism hit a “modest” 20.2% (was 14.7% in October) although the multiple actions of the Anonymous, whereas Cyber Espionage and Cyberwarfare are stable at respectively 6.7% and 3.4%.

November 2015 Motivations

The unknown attacks are still the majority (25.8%) of the Attack Techniques Chart. SQLi is immediately behind (20.2%), whereas the actions of Armada Collective push DDoS at a remarkable 18% (was 4% in October). It’s also worth to mention, in this chart, the 6.7% achieved by the Targeted Attacks.

November 2015 Techniques

Industry leads the Distribution of Target Chart and counts for nearly one third (29.2%) of the occurrences (was 38.7% in October). Governments win the Silver medal (very far from number one, with a “modest” 9%, half the value of October), whereas Organizations and Online Forums share the lower stand of the podium with 7.9%.

November 2015 Targets

Inevitably, the actions of the Armada Collective pushed Email Service Providers at number one of the Industry Drill Down chart (26.9%). Software companies were also a preferred target (their 23.1% is quite close), whereas Hotels close the podium with 11.5%. ISIS related sites/accounts were under the fire of the activists in November, and as a consequence Terrorism leads the Organization Drill Down Chart (sharing the higher stand of the podium with Politics). Software, UN and Military close the chart with 14.3%

November 2015 Industry

November 2015 Org

As usual, the sample must be taken very carefully since it refers only to discovered attacks included in my timelines, aiming to provide an high level overview of the “cyber landscape”.

If you want to have an idea of how fragile our data are inside the cyberspace, have a look at the timelines of the main Cyber Attacks in 2011, 2012, 2013, 2014 and now 2015 (regularly updated). You may also want to have a look at the Cyber Attack Statistics.

Of course follow @paulsparrows on Twitter for the latest updates, andfeel free to submit remarkable incidents that in your opinion deserve to be included in the timelines (and charts).

Leave a Reply

%d bloggers like this: