{"id":63117,"date":"2024-05-06T10:39:37","date_gmt":"2024-05-06T02:39:37","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=63117"},"modified":"2024-05-06T10:39:39","modified_gmt":"2024-05-06T02:39:39","slug":"cybercriminals-persist-in-breaking-passwords-of-businesses-in-sea","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2024\/05\/06\/cybercriminals-persist-in-breaking-passwords-of-businesses-in-sea\/","title":{"rendered":"Cybercriminals persist in breaking passwords of businesses in SEA"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Kaspersky reported blocking more than 61M Bruteforce attacks eyeing businesses in Southeast Asia (SEA) last year.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From the period of January to December 2023, a total of 61,374,948 Bruteforce.Generic.RDP. were detected and foiled by Kaspersky B2B products installed in companies of various sizes in the region.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A\u00a0Bruteforce attack\u00a0is a method for guessing a password or an encryption key that involves systematically trying all possible combinations of characters until a correct one is found. A successful Bruteforce attack allows an attacker to obtain valid user credentials.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Remote Desktop Protocol (RDP)\u00a0is Microsoft\u2019s proprietary protocol, providing a user with a graphical interface to connect to another computer through a network. RDP is widely used by both system administrators and less-technical users to control servers and other PCs remotely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A Bruteforce.Generic.RDP.* attack attempts to find a valid RDP login \/ password pair by systematically checking all possible passwords until the correct one is found.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A successful Bruteforce.Generic.RDP.* attack allows an attacker to gain remote access to the targeted host computer.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vietnam, Indonesia, and Thailand registered the highest number of RDP attacks last year. Meanwhile, Singapore has over six million incidents, the Philippines has almost 5 million, and Malaysia with the lowest number of nearly three million Bruteforce attempts.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Row Labels<\/strong><\/td><td><strong>2023<\/strong><\/td><\/tr><tr><td>indonesia<\/td><td>11,703,925<\/td><\/tr><tr><td>malaysia<\/td><td>2,810,648<\/td><\/tr><tr><td>philippines<\/td><td>4,620,264<\/td><\/tr><tr><td>singapore<\/td><td>6,059,867<\/td><\/tr><tr><td>thailand<\/td><td>10,205,819<\/td><\/tr><tr><td>viet nam<\/td><td>25,974,425<\/td><\/tr><tr><td>Grand total<\/td><td>61374948<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cBruteforce attack is not a threat companies should ignore. The use of third-party services for data exchange, employees working on home computers, and potentially insecure Wi-Fi networks, and the use of remote-access tools like RDP remain to be a headache for corporate infosec teams,\u201d explains Adrian Hia, Managing Director for Asia Pacific at Kaspersky.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe cannot discount that artificial intelligence modules and algorithms can be used to\u00a0break corporate log-in and password pairs faster. And once threat actors gain remote access to your corporate computers, the possibility of financial and even reputational damage they can do becomes endless. Businesses here should beef up their endpoint and network security posture to defend themselves against smarter AI-based Bruteforce attacks,\u201d he adds.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you use RDP in your work, be sure to take all possible\u00a0protection measures:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;At the very least, use strong passwords.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Make RDP available only through a corporate VPN.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Use&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/en.wikipedia.org\/wiki\/Network_Level_Authentication\">Network Level Authentication<\/a>&nbsp;(NLA).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0If possible,\u00a0enable two-factor authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;If you don\u2019t use RDP, disable it and close port 3389.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Use a reliable security solution like Kaspersky\u00a0Endpoint Security for Business.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Companies are also encouraged to take a step further when it comes to defending their security perimeters. Kaspersky has an integrated software solution that includes a set of functions for event monitoring and management, Kaspersky Unified Monitoring and Analysis Platform (KUMA).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A unified console for monitoring and analysing information security incidents, KUMA can be used as a log management system and as a full-fledged SIEM system.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>From the period of January to December 2023, a total of 61,374,948 Bruteforce.Generic.RDP. were detected and foiled by Kaspersky B2B products installed in companies of various sizes in the region.<\/p>\n","protected":false},"author":6,"featured_media":54733,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[286,101,54,2103],"class_list":["post-63117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-it-security","tag-kaspersky","tag-security","tag-security-breach"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/63117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=63117"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/63117\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/54733"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=63117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=63117"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=63117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}