{"id":42732,"date":"2021-04-20T13:19:30","date_gmt":"2021-04-20T05:19:30","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=42732"},"modified":"2021-04-20T13:19:34","modified_gmt":"2021-04-20T05:19:34","slug":"ransomware-targeting-sea-smbs-drops-in-2020-vs-2019","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2021\/04\/20\/ransomware-targeting-sea-smbs-drops-in-2020-vs-2019\/","title":{"rendered":"Ransomware targeting SEA SMBs drops in 2020 vs 2019"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Global cybersecurity company Kaspersky reported a significant decrease in the number of ransomware attempts it has detected and foiled among its small and medium-sized businesses (SMBs) users in the Southeast Asian (SEA) region.\u00a0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In its latest Kaspersky Security Network (KSN) report, the company revealed less than one million ransomware attempts (804,513) were monitored in 2020, less than half of 2019\u2019s over 1.9 million detections.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Among the six SEA countries, only Singapore observed an uptick in the number of ransomware detections. There was a slight increase from 2,275 instances in 2019 that jumped to 3,191 in 2020.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ecp.yusercontent.com\/mail?url=https%3A%2F%2Flh4.googleusercontent.com%2FA5or2-NvGkNrv4y1CfWj01SrZ3fpIzZ3qAP_kV1vUDWt8ZYkp8M6zo8JwDUPTiwGlewjq6_D31JmkGZY78bR5Vs8YScLAnZuj4W1MdGQ4OcmsKEOXwiBCsf-xjTE1-_3kuVyhsQP&amp;t=1618895697&amp;ymreqid=27f3344f-c727-c29c-1cbe-51008a011c00&amp;sig=oxpocYO2u5zqYuVRyYeBcg--~D\" alt=\"\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Although Indonesia still ranked fifth globally for the volume of its ransomware detections, its 1,158,837 detections are now down to 439,473. The trend of decreased ransomware incidents was observed across other countries in the region including Vietnam, the Philippines, Malaysia, and Thailand.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">China remains at the top spot in terms of ransomware detections globally both for 2019 and 2020. Meanwhile, Brazil and the Russian Federation switched places for the second and third spots, with Brazil now being 2<sup>nd<\/sup> globally for 2020.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cI looked at the statistics for individual families, and it follows the overall drop in the number of detections, mainly due to the drop in the number of WannaCry detections. This family makes up a significant share of all detected ransomware, despite the fact that it has not been supported by the creators for more than three years and exists as a \u2018zombie\u2019,\u201d said Fedor Sinitsyn, security researcher at Kaspersky.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the most persistent cyber threats to SMBs in the region remains to be ransomware, a <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/resource-center\/definitions\/what-is-ransomware\">malware <\/a>designed to infect computers of organizations and individuals, encrypt the data in it, and block access to it. Ransomware attackers then will demand a fee from the victims in exchange for enabling the system to work again.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ransomware attacks may be declining but Kaspersky has been issuing a warning to companies, of all shapes and sizes, against the increasing activities of \u2018Ransomware 2.0\u2019 or what\u2019s known as targeted ransomware.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This cybersecurity \u201cdisease\u201d goes beyond kidnapping data. Malicious ransomware groups are now conducting data exfiltration coupled with blackmailing. Using \u201cpressure tactic\u201d, these cybercriminals threaten to publish publicly the data they hold, further increasing the need for the victims to pay the ransom to protect their valued reputation.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe decrease of ransomware detections here should not make us complacent. Since last year, we have been underlining the evolution of this threat. Ransomware groups are now more concerned about quality over quantity. Meaning, from blindly throwing a line into the ocean and waiting for an insecure user to bite, attackers are now more aggressive and targeted towards their victims,\u201d comments Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cA single targeted ransomware group alone managed to breach over <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/technology.inquirer.net\/106474\/cybersecurity-firm-warns-vs-ransomware-2-0-pressure-tactics\">61 companies<\/a> in the Asia Pacific (APAC) region last year, and with the <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.consultancy.asia\/news\/3947\/new-normal-reflecting-on-digital-trends-among-smes-in-asia-pacific\">accelerated<\/a> digitalization of businesses in the region, we also predict that the sophistication behind attack methods will only increase and become more sophisticated. SMBs and enterprises should seriously look into intelligence-based technologies, both for endpoint protection as well as detection and response,\u201d he adds.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are different ways to protect your computer and your data from ransomware attacks. Some of Kaspersky\u2019s tips include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them.<\/li><li>Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network.<\/li><li>Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities<\/li><li>Focus your defense strategy in detecting lateral movements and data exfiltration to the Internet. Pay a special attention to the outgoing traffic to detect cybercriminals connections. Back up data regularly. Make sure you can quickly access it in an emergency when needed. Use the latest Threat Intelligence information to stay aware of actual TTPs used by threat actors.<\/li><li>Use solutions like Kaspersky Endpoint Detection and Response and Kaspersky Managed Detection and Response service which help to identify and stop the attack on early stages, before attackers reach their final goals.<\/li><li>To protect the corporate environment, educate your employees. Dedicated training courses can help, such as the ones provided in the Kaspersky Automated Security Awareness Platform. <\/li><li>Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business that is powered by exploit prevention, behavior detection and a remediation engine that is able to roll back malicious actions. KESB also has self-defense mechanisms which can prevent its removal by cybercriminals.<\/li><li>Always have a data backup on a separate external hard drive.\u00a0<\/li><li>Avoid negotiating with cybercriminals or paying the ransom.\u00a0<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Among the six SEA countries, only Singapore observed an uptick in the number of ransomware detections. There was a slight increase from 2,275 instances in 2019 that jumped to 3,191 in 2020. <\/p>\n","protected":false},"author":6,"featured_media":40198,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[1923,1589,1481,495,6498,6151,286,101,54,2103,3914,53,4100],"class_list":["post-42732","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-cloud-security","tag-cyber-security","tag-cybersecurity","tag-cybersecurity-and-cybercrime","tag-good-tech","tag-high-tech","tag-it-security","tag-kaspersky","tag-security","tag-security-breach","tag-security-platform","tag-security-risk-management","tag-security-solutions"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/42732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=42732"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/42732\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/40198"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=42732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=42732"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=42732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}