The other side of quarantine: attacks on database servers grew by quarter worldwide, along with web attacks increase

From an information security standpoint, an employee within the office network and an employee connecting to the same network from home are two completely different users

  

While undoubtedly, staying home is a safer option in these turbulent times, it does not mean that no threats are awaiting the users in the digital world. Kaspersky telemetry showed that both brute force attacks on databases and web attacks have grown by almost a quarter daily in the first trimester of 2020, while most users were working from home.

From an information security standpoint, an employee within the office network and an employee connecting to the same network from home are two completely different users. It seems cybercriminals share this view, as the number of attacks on servers and remote access tools has increased as their usage has grown, with the average daily number of brute force attacks on database servers in April 2020 increasing by 23% from January..

In addition, the average number of web attacks blocked by Kaspersky Web threats detection technologies increased by a staggering 25% from January 2020. All of the threats grew more or less proportionally, however, most web attacks that were blocked originated with resources that redirected users to phishing websites.

Furthermore, the researchers also detected an increase in Trojan-PSW browser script modifications, which are used to steal bank card credentials entered by users while shopping online and then transfer them to cybercriminals. Websites capable of silently installing cookie files on users’ computers and resources that injected advertising scripts into users’ traffic also accounted for a significant share of the web threats.

 “Usually, when we monitor changes in activities of certain threats, we think it’s far-fetched to associate them with concurrent world events, unless those have a direct relation to the cyberthreats. However, this case is different, as users’ behavior has changed worldwide. Undoubtedly, all changes in activity cannot be fully tied to users staying home with absolute certainly – there are always other unaccounted factors in the equation—but the trend certainly shows that staying home has affected both users and cybercriminals. We advise users to stay cautious and use a reliable security solution to protect themselves from online threats, too” – comments Denis Parinov, Kaspersky security researcher.

Learn more about how cyberthreats have changed during the pandemic on Securelist.

In order to protect yourself from web threats, Kaspersky recommends:

  • Check the website’s authenticity. Do not visit websites until you are sure that they are legitimate and start with ‘https’. Confirm that the website is genuine, by double-checking the format of the URL or the spelling of the company name, reading reviews about it and checking the domain’s registration data before starting downloads.
  • Use a reliable security solution, such as Kaspersky Total Security, for comprehensive protection from a wide range of threats.

When connecting to corporate networks from home—regardless of the tools used—Kaspersky experts recommend the following steps to stay secure:

  • Make sure to use different, strong passwords for accessing corporate resources
  • Update all software on your device to the latest version
  • Where possible, use encryption on devices used for work purposes.
  • Make backup copies of critical data.
  • Use a corporate security solution empowered with network threat protection, such as Kaspersky Endpoint Security for Business for endpoint protection and Kaspersky Hybrid Cloud Security for protection of your cloud workloads. The solutions also contain log inspection functionality to configure monitoring and alert rules for brute force and failed login attempts.

If you are an employer and your employees need to use RDP then be sure to:

  • Enable access to RDP through a corporate VPN
  • Enable use of Network Level Authentication (NLA) when connecting remotely.
  • If possible, enable multi-factor authentication
  • Use corporate security solution empowered with network threat protection such as Kaspersky Endpoint Security for Business

About Kaspersky
Kaspersky is a global cybersecurity company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative security solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection and a number of specialized security solutions and services to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help 250,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com

For further information please contact:

Sweta Fernandes, Account Executive, Golin, KasperskyTeam@golin.ae 

Send us your press releases topressrelease.zawya@refinitiv.com 

© Press Release 2020

Disclaimer: The contents of this press release was provided from an external third party provider. This website is not responsible for, and does not control, such external content. This content is provided on an “as is” and “as available” basis and has not been edited in any way. Neither this website nor our affiliates guarantee the accuracy of or endorse the views or opinions expressed in this press release.

The press release is provided for informational purposes only. The content does not provide tax, legal or investment advice or opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our affiliates shall be liable for any errors or inaccuracies in the content, or for any actions taken by you in reliance thereon. You expressly agree that your use of the information within this article is at your sole risk.

To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and the respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including without limitation, lost profits, lost savings and lost revenues, whether in negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility or could have foreseen any such damages.

More From Press Releases