EVENTS
EVENTS/DAY
0
EVENTS
0
EVENTS/DAY
0

Motivations October H2 2023

No Data Found

Attack Techniques October H2 2023

No Data Found

In the second half of October 2023, I have collected 183 events (11.44 events per day,) a number slightly lower than the first fortnight of the same month, but a number which confirms the high level of activity that is characterizing this end of the year.

Ransomware continued to characterize the threat landscape (37 events were directly or indirectly related to this kind of attack,) and consequently malware attacks led the chart of the attack techniques with 34.4% (63 out of 183 events), a number in line with the previous two weeks. On the other hand, the exploitation of vulnerabilities characterized 15.3% of events, again a number in line with the previous period.

The fintech sector saw the execution of a massive operation targeting more than 25 victims worldwide, where the threat actors stole $4.4 million in cryptocurrency using private keys and passphrases stored in stolen LastPass databases.

No particular mega breaches were recorded in this period, despite I must point out that I added a massive one to the previous timeline, which was unearthed later, and it is the one targeting the Indian Council of Medical Research, with 815 million records leaked of Indian citizens who had Covid-19 tests.

Threat actors driven by cyber espionage were quite busy in exploiting the numerous vulnerabilities disclosed in this period (and not only.) For example several groups including Sandworm, APT28, and APT40 carried on operations exploiting the CVE-2023-38831 WinRAR vulnerability, whilst the North Korean Lazarus leveraged the CVE-2023-42793 vulnerability in TeamCity to breach multiple organizations, and also Winter Vivern targeted European governments and think tanks via the Roundcube CVE-2023-5631 flaw. Besides this widespread exploitation, other interesting events related to cyber espionage concern a report from the French Cyber Security Agency (ANSSI) revealing a long standing campaign by the Russian APT28 targeting government entities, businesses, universities, research institutes, and think tanks in France since the second half of 2021.

But obviously the war in Middle East was also the trigger for multiple operations carried out by Hacktivists on both sides (including some well-known actors such as Killnet and Anonymous Sudan,) with Israel and other allied countries targeted by multiple attacks.

Of course, my suggestion is always the same: browse the timeline, and obviously share it to support my work in spreading the risk awareness across the community. And don’t forget to follow @paulsparrows on X (formerly Twitter,) or even connect on Linkedin, or Mastodon for the latest updates.

Geo Map October H2 2023

No Data Found

BE NOTIFIED OF NEW POSTS

SUPPORT MY WORK!
MAKE A DONATION

Creating the timelines is a very time-consuming task.

Any little helps!

BREACHOMETER

No Data Found

The “Breachometer” compares the current number of events/day with the max and min values recorded in the previous 12 months.

12 MONTHS TREND

No Data Found

POPULAR POSTS
  • 2023 Stats Featrured Image2024 Cyber Attacks Statistics

    In 2023, there was a 35% increase in cyber attacks to 4,128 events, with the MOVEit CVE-2023-34362 vulnerability being heavily exploited. Cybercrime dominated as the main motivation at 79%, while malware led attack techniques with 35.9%. Healthcare remained a top target for ransomware. The data ...

  • January 2024 Cyber Attacks Statistics

    In January 2024 I collected 288 events, with Cyber Crime continuing to lead the motivations, and ransomware leading the known attack techniques, ahead of Malware.

  • Image by izhar ahamed from Pixabay16-31 December 2023 Cyber Attacks Timeline

    The last cyber attacks timeline of 2023 revealed a decrease in events (120 events down from 140 of the previous timeline), and this trend extended to lower ransomware and malware rates. There were a few mega breaches, and some events in the cryptocurrency sector. Cyber ...

  • computer program language text1-15 February 2024 Cyber Attacks Timeline

    In the cyber attacks timeline of February H1 2024, I collected 139 events dominated by malware attacks. Ransomware and vulnerabilities also played an important role in the threat landscape.

  • Q4 2023 Featured ImageQ4 2023 Cyber Attacks Statistics

    In Q4 2023, cyber attack events decreased by 7.1% to 1029 compared to the previous quarter. Cybercrime remains the primary motive, although slightly reduced, while malware tops attack techniques, increasing from the last quarter. Multiple industries and healthcare are the most targeted sectors. These statistics ...

X

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.