Insiders Blamed For An Upsurge Of Cybersecurity Attacks

The current COVID-19 crisis has seen an upsurge in the use of technology as many companies adopt work from home and bring your own device policies, increasing organizational risk as cybersecurity etiquette shifts to end-users.

Insiders have since been blamed for these cybersecurity incidents that have increased by 55 percent in the last three months since most companies lack active monitoring mechanisms of their IT infrastructure for the remote working.  As a result, the most prevalent attacks include phishing and social engineering.

According to Dimension Data, the sudden spike has resulted from attackers taking advantage of publicly available weak systems and most security controls designed to monitor and capture activities failing to keep up as they are intended for traditional on-premise infrastructure thereby leaving security control gaps as more employees remotely connect to company resources from mobile devices and external networks.

The Financial Services Industry (FSI) remains the most targeted sector because of the immediate monetary gain.

Speaking during the launch of Dimension Data Intelligent Security business in East Africa, the unit’s Head – Ishmael Muli said although insider threats are largely attributed to malicious employees and contractors, statistics from the company’s Threat Intelligence Centre shows that most incidences in the region originate from employee negligence and other close associates ignoring corporate cybersecurity policies, misuse of data, and installation of unauthorized applications among others.

Intelligent Security unites all the capabilities and security offerings while developing locally relevant solutions tailored to protect organizations.

“Across East Africa, we are seeing insiders take advantage of organizations that lack visibility or the ability to investigate successful cyberattacks due to limited access controls to detect unusual activity once someone breaches their network. Some of these attacks involve manipulation of transactional data, tampering of logs to limit tracing, as well as framing legitimate users – all of which make forensic investigations difficult,” Muli said.

Current attacks within East Africa are being linked to hackers employing smarter methods to distribute their server networks and occasionally purchasing command and control systems in other countries, with traffic being routed through myriad systems making it difficult to trace its origin.

“Cybersecurity plays a critical role in any business within emerging markets like Kenya. We’ve built Dimension Data Intelligent Security to ensure that we offer world-class solutions to our clients while making sure they suit the unique needs of our clients operating within these markets. Further to this, we plan to focus on local skills development specifically in the threat intelligence space,” he added.

According to the Communication Authority (CA) Annual Report 2018/2019, malware attacks were the most prevalent threats accounting for approximately 78 percent of all cyber threat detections by the National Kenya Computer Incident Response Team – Coordination Centre (National KE-CIRT/CC). Web application attacks and botnet/denial of service threats accounted for approximately 11% and 9% percent respectively of detected cyber threats.

The first half of the year has also seen an increase in reconnaissance attacks accounting for 40 percent of all observations in the Middle East and Africa (MEA) region according to NTT Ltd. Global Threat Intelligence Report 2020. A rise in Web Application attacks on common Content Management Systems (CMS) such as Joomla and WordPress accounted for over 20 percent of observed attacks. Whilst service-specific attacks increased by 40 percent targeting known vulnerabilities that may have remained largely unaddressed by various organizations.

With the trend set to continue as the volume of information insiders’ access, store and transmit rises – and remote working becomes the status quo, Muli advised organizations to invest in threat intelligence services to gain regular visibility of what is happening in their internal networks – to automatically detect and remediate stealthy attacks that would otherwise be missed. He urged organizations to conduct insider risk assessments on their critical business functions that could be leveraged by Insiders for fraud.

“Moving forward, cybercriminals will increasingly automate cyberattacks. This requires organizations to automate a lot as well with intelligence analysis and orchestration tools, especially in terms of incidence response, to reduce the average remediation time. The future is going to be all about how to recover fast from an attack as networks, systems, and processes get more sophisticated for integration,” Muli emphasized.

Dimension Data’s global integration with NTT Ltd. allows for Dimension Data Intelligent Security to provide its clients with solutions that protect their businesses from noted threats all over the globe and harness key innovations from international markets. At the same time, Dimension Data Intelligent Security is investing heavily in research to develop solutions offerings that speak directly to the pricing, scaling, and security needs of local businesses.