Cyber Defense eMagazine November Edition for 2021

Lateral Movement – The Key Element in Advanced
Attacks
Understanding lateral movement techniques in advanced cyberattacks and how to fight back
By Jon Murchison, founder and CEO, Blackpoint Cyber
Advanced Attacks on the Rise
When the pandemic made its impact around the globe early last year, it simultaneously ushered in an
exponential surge in cybersecurity attacks. In the scramble to mass-migrate businesses to virtual work
environments, many did not have the time nor resources to implement strong cybersecurity policies and
processes. This climate has allowed attacks in particular to boom in nearly all industry verticals,
impacting critical infrastructure, utilities, transport, food supplies, healthcare, education, and the US
economy at federal, state, and municipal levels.
Advanced cyberattacks are now considered a risk to national security following the sweeping uptick in
cyberattacks. Once targeting small companies or individuals, threat actors are now making headlines by
growing their attack radius to include major infrastructure companies and even leading security firms.
What’s more is that threat actors are quickly evolving their tactics and targets when it comes to deploying
their cyber assaults.
Understanding Lateral Movement in APTs
Advanced persistent threats (APTs) are seeing increased success due to lateral movement techniques.
When threat actors infiltrate a network, the initial, vertical entry seldom causes damage. Actors are likely
to break in through low-level web servers, compromised email accounts, or a poorly protected endpoint
device. The real damage begins once the actors secure their foothold and start to pivot laterally through
Cyber Defense eMagazine – November 2021 Edition 111
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.