{"id":16587,"date":"2022-11-24T16:00:52","date_gmt":"2022-11-24T15:00:52","guid":{"rendered":"https:\/\/www.databack.fr\/non-categorise\/2022-reports-on-cybercrime-and-ransomware\/"},"modified":"2025-06-30T17:29:12","modified_gmt":"2025-06-30T15:29:12","slug":"2022-reports-on-cybercrime-and-ransomware","status":"publish","type":"post","link":"https:\/\/www.databack.fr\/en\/blog\/2022-reports-on-cybercrime-and-ransomware\/","title":{"rendered":"2022 reports on cybercrime and ransomware"},"content":{"rendered":"\n

Several reports provide an overview of cybercrime and threat trends (ransomware, phishing…) for the year 2022. The study on cyber claims<\/a> published by BESS\u00c9 and Groupe Stelliant, and the report on cybersecurity incident response revealed by Wavestone, help prepare companies for 2023… <\/em><\/em><\/em><\/em><\/em><\/p>\n\n

Trends in 2022: ransomware and phishing<\/h2>\n\n

Unsurprisingly, ransomware<\/strong> dominates the cybercrime landscape. Far ahead of attacks of other kinds (DDoS, fraud, website or application compromise, data theft), they account for 89% of cyberattacks suffered by businesses (BESS\u00c9 and Groupe Stelliant sample studied over the 2019-2021 interval). <\/p>\n\n

Designed for extortion, ransomware compromises IS activity and data availability through encryption. Their attacks may be accompanied by data theft, with the threat of disclosure. The primary objective of ransomware is therefore to penetrate their targets’ information systems, exploiting every possible security loophole. <\/p>\n\n

Phishing<\/strong> is the most widespread attack mechanism, ahead of brute-force attacks, web or IS vulnerabilities, account usurpation or remote access<\/em>. According to BESS\u00c9 and Stelliant, these fraudulent e-mail or SMS campaigns aimed at recovering the target’s credentials account for 30% of attacks, and 51% according to Wavestone (taking into account the use of valid accounts). <\/p>\n\n

Cybercriminals and hackers: profiles, motivations and targeting<\/h2>\n\n

Unsurprisingly, cybercrime<\/strong> is also on the rise. In its IT threat panorama<\/a> published in March 2022, the ANSSI (Agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d’information) reported 1,082 proven IS intrusions for 2021, compared with 786 in 2020. At the same time, cybercriminals and hackers are improving their capabilities and getting better organized. <\/p>\n\n

The main motive for cyber attacks remains financial gain (51% according to Wavestone, in the form of extortion via ransomware or resale of stolen data), ahead of computer malice, destabilization and espionage. Three quarters of the attacks managed by Wavestone’s CERT-W(Computer emergency response team<\/em>) are opportunistic, targeting neither a particular type of organization nor a particular sector of activity. <\/p>\n\n

According to Wavestone, cybercriminal groups are becoming increasingly organized and professionalized. In early 2022, the disclosure of documents from the Conti group revealed a structure similar to that of a company, with recruitment, training, purchasing and other functions. Providers of cybercriminal services (hosting, RaaS <\/em>or Ransomware as a Service<\/em>…) are developing accordingly. <\/p>\n\n

Cybersecurity and cyber resilience for businesses<\/h2>\n\n

Developments in corporate cybersecurity<\/strong> are influencing the nature of the IT threat. Cyber-attacks are turning away from large companies that are investing in their IT protection. The result is a trend towards attacks of opportunity, aimed at the middle market (SMEs, ETIs, etc.) and the public sector (healthcare, education, etc.). <\/p>\n\n

The BESS\u00c9 and Stelliant study on the loss experience of IT threats underlines the impact of cyber attacks on companies: business disruption, total or partial rebuilding of information systems, operating losses… According to the study, companies still largely underestimate the time it takes to get back up and running, and the costs generated by IT losses.<\/p>\n\n

Instead, companies need to cultivate their cyber resilience by identifying their vital data and applications, establishing a BCP\/ERP and a communication plan. The Wavestone report reminds us of the need to combine innovative measures with the fundamentals of cybersecurity: backup and recovery strategies, third-party lifecycle management, strengthening cloud security, the need to invest (cyber-insurance, recourse to experts, etc.), etc. <\/p>\n\n

Sources :<\/em><\/p>\n\n