LA0jD

More documents

Recommendations

Info

Organizations would need to adapt to keep up with the dangers that targeted attacks pose. One thing commonly taken for granted when explaining targeted attacks is that they are not linear in nature. Nothing could be further from the truth. Each component just emphasizes discrete steps or objectives related to gaining deeper and deeper access to networks. But these components can be repeatedly done, depending on each activity’s success and whether or not the quality of information acquired is enough for an attack to progress. 28 | Targeted Attack Trends
TREND MICRO | TrendLabs 2014 Targeted Attack Campaign Report 5 4 1 2 3 6 1 INTELLIGENCE GATHERING 2 POINT OF ENTRY 3 C&C COMMUNICATION 4 LATERAL MOVEMENT 5 ASSET DISCOVERY 6 DATA EXFILTRATION Components of a targeted attack campaign Targeted attacks are very often cyclical in nature; their components overlap. Threat actors determined to maintain access to systems, for instance, will not rely on a single successful point of entry. They generally install malware in different parts of networks if they can. C&C communication and lateral movement occur throughout campaigns. Data exfiltration is not a one-time affair, too, since transmitting information can be a noisy activity and more data can be progressively exfiltrated, depending on a lot of factors. Finally, maintenance can be considered a final “component” of a targeted attack wherein attackers perform certain activities to make sure incident response or takeover from other hackers fails. Given the increased volume of targeted attacks, ease of mounting them, and difficulty to protect against them, network defenders must be able to exactly understand what a shift in mindset from prevention to detection entails. This means accepting that targeted attacks are or will eventually hit their networks, so no suite of blacklisting technologies will be able to keep determined threat actors at bay. 29 | Targeted Attack Trends
Page 1 and 2: Targeted Attack Trends 2014 Annual
Page 3 and 4: Introduction Targeted attacks, aka
Page 5 and 6: Attributing targeted attack campaig
Page 7 and 8: TREND MICRO | TrendLabs 2014 Target
Page 9 and 10: Highly specific configurations did
Page 11 and 12: Targeted attack tactics continued t
Page 17 and 18: Tried-and-tested and newly discover
Page 21 and 22: Targeted attacks remained a global
Page 25 and 26: Cybercriminal adoption of targeted
Page 27: TREND MICRO | TrendLabs 2014 Target
Page 33: Created by: The Global Technical Su

LA0jD

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?