▾ G11 Media Network: | ChannelCity | ImpresaCity | SecurityOpenLab | GreenCity | Italian Channel Awards | Italian Project Awards | ...
InnovationOpenLab

Trellix Detects Collaboration by Cybercriminals and Nation-States

Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today released The CyberThreat Report: November 2023 from its Advanced Research Center. Trellix obser...

Business Wire

Report Highlights New Programming Languages in Malware Development, Adoption of Malicious GenAI, and Acceleration of Geopolitical Threat Activity

SAN JOSE, Calif.: Trellix, the cybersecurity company delivering the future of extended detection and response (XDR), today released The CyberThreat Report: November 2023 from its Advanced Research Center. Trellix observed indicators of collaboration between ransomware groups and nation-state-backed advanced persistent threat (APT) actors, adoption and usage of lesser-known programming languages for malware, and cybercriminals developing Generative AI (GenAI) tools.

"As technology advances, so does cybercrime – and understanding the changing landscape is vital for CISOs and SecOps teams to stay ahead of threats," said John Fokker, Head of Threat Intelligence, Trellix Advanced Research Center. “Cybercriminals are becoming increasingly more agile, organized, and politically aligned. It is imperative defenders refer to threat intelligence to strengthen their security posture with limited resources."

The Trellix Advanced Research Center’s latest CyberThreat Report includes:

  • Malicious GenAI: Cybercriminals bypass protections to take advantage of commonly known tools and use GenAI to enhance phishing campaigns. The accelerating scale and speed of phishing attacks indicates malicious GenAI may already be in deployment today.
  • Geopolitical Threat Activity: Nation-state threat activity spiked over 50% in the last six months due to conflict escalation in Russia and Ukraine, intensified cyber activity in Israel just before and during the conflict, and disruptive attacks on Taiwan heading into their 2024 elections.
  • Ransomware Developments: Global detections and industry-reported incidents, particularly in Q2, reflect unusual variations in ransomware families, as well as countries and industries targeted. The Trellix Advanced Research Center also observed a splintering of large ransomware groups, with the introduction of smaller groups and more attacks focused on data exfiltration.
  • Underground Collaboration: The last six months demonstrated an increase in threat actors actively collaborating on Dark Web forums. This spanned groups formally joining together (“The Five Families”), an escalation in selling/sharing of zero-day vulnerabilities, joint PoC development efforts to accelerate exploitations, and more.
  • Polyglot Malware: Cyber, a polycrisis itself, is a threat multiplier – and the rise of polyglot malware further exacerbates this. New programming languages are becoming popular malware choices, with Golang seeing high usage for ransomware (32%), backdoors (26%), and Trojan Horses (20%).

The cybersecurity landscape experiences upheaval regularly as geopolitical and economic developments create an increasingly complicated and uncertain world. New cyber actors emerge daily while new vulnerabilities, exploits, and tactics are constantly discovered. The comprehensive analysis provided by the Trellix Advanced Research Center serves as a vital resource for today’s CISOs to understand and mitigate evolving cybersecurity risks in an interconnected world.

The CyberThreat Report: November 2023 includes proprietary data from Trellix’s sensor network, investigations into nation-state and cybercriminal activity by the Trellix Advanced Research Center, and open and closed-source intelligence. The report is based on telemetry related to detection of threats, when a file, URL, IP-address, suspicious email, network behavior, or other indicator is detected and reported by the Trellix XDR platform.

Additional Resources

About the Trellix Advanced Research Center

The Trellix Advanced Research Center brings together an elite team of security professionals and researchers to produce insightful and actionable real-time intelligence to propel customer outcomes and the industry at large. Driven by the industry’s most comprehensive charter, our skilled researchers detect trends ahead of the market to empower our customers and partners to solve emerging threats. More at https://www.trellix.com/en-us/advanced-research-center.html.

Follow Trellix on LinkedIn and X.

Contacts

Sarah Erman
media@trellix.com

Fonte: Business Wire

If you liked this article and want to stay up to date with news from InnovationOpenLab.com subscribe to ours Free newsletter.

Related news

Last News

Metaverse: between fashion, ecommerce and real estate in Italy strong…

The European market for the metaverse will generate $119.35 billion in revenue. Companies must make themselves ready.

Italy's Space Economy ecosystem looks to the Moon

Italian Space Agency is developing a lunar habitation module that could be used in the NASA Artemis Space exploration program

Bravo Innovation Hub Palermo: 20 startups selected for acceleration

The acceleration program developed by MIMIT selected the best startups for the “New energy, green and clean tech” and “Inclusion, social impact and Health”…

Italian system integrator Var Group expands digital security services…

With the acquisition of 51% of the South Tyrolean company ICS, the business unit Digital Security will also strengthen its Security Operation Center

Most read

Italian system integrator Var Group expands digital security services…

With the acquisition of 51% of the South Tyrolean company ICS, the business unit Digital Security will also strengthen its Security Operation Center

Italy's Space Economy ecosystem looks to the Moon

Italian Space Agency is developing a lunar habitation module that could be used in the NASA Artemis Space exploration program

Metaverse: between fashion, ecommerce and real estate in Italy strong…

The European market for the metaverse will generate $119.35 billion in revenue. Companies must make themselves ready.

Bravo Innovation Hub Palermo: 20 startups selected for acceleration

The acceleration program developed by MIMIT selected the best startups for the “New energy, green and clean tech” and “Inclusion, social impact and Health”…

Newsletter signup

Join our mailing list to get weekly updates delivered to your inbox.

Sign me up!