That implies that CISOs ought to be sure that programs try to distinguish between automated and handbook assaults. And to then look at handbook assaults very rigorously, Harrigan stated.
CISOs ought to “spend further time” analyzing the handbook assault makes an attempt, he stated, as doing so could give the security operations middle a sneak preview of a zero-day, thereby giving them the flexibility to tweak defenses to attempt to thwart an imminent assault carried out probably at scale by follow-on bots.
“Each time [an attacker] knocks off a bit of armor, any individual figures out make a greater piece of armor,” Harrigan stated. “It’s all the time a cat and mouse recreation.”
The Lexis-Nexis report — accessible right here — additionally recognized the 2023 geographies should more likely to have launched assaults as “elements of Southeast Asia [that] are established houses for devoted distant rip-off facilities. Cybercriminals favor border areas in Cambodia, Myanmar, and distant elements of Thailand.”
Addressing fraud and scams, relatively than cybercrime generally, the report famous a number of developments over the previous few years.
“In APAC, third-party account takeover has grow to be much more dominant than in 2022, pushed by a relentless rip-off pandemic throughout the area which for now could be primarily fueling subsequent unauthorized fraud makes an attempt, in distinction with the licensed switch scams seen in EMEA,” LexisNexis researchers wrote. “Bonus abuse worsened in each EMEA and LATAM, linked to each gaming and playing and ecommerce. North America noticed important YOY share progress of true id theft in 2023, offsetting a decline in third-party chargeback fraud as a share of all classifications.”
