2024勒索软件状况研究报告预判攻防态势强化防御体系 英文版 .docxVIP

WHITEPAPER

StateofRansomware2024

Anticipatingthebattleandstrengtheningyourdefenses

WHITEPAPER

StateofRansomware2024

ExecutiveSummary

Thebattleagainstransomwarein2024requiresacomprehensiveandmulti-layereddefensestrategy.

Inthepastyear,ransomwareadoptedamoreinsidiousapproach,withgreateremphasisondataexfiltrationandincreasedstealth.Cybercriminalsarestrategicallyextractingsensitivedatawithoutnecessarilydeliveringthedestructiveencryptionpayloadsthatwehaveseeninthepast.Thisstealthenhancesattackers’abilitytooperatewithoutraisingalarmsandwithoutdisruptingthevictim’sbusinessoperations.Ransomwarevictimsmustpaytopreventtheexposureofconfidentialinformation.

Inourannualransomwarestudy,wesurveyedover300ITandsecuritydecision-makersacrosstheUnitedStatesfromavarietyofindustriestogetinsightsfromthefolksinthetrenches.Wecomparedyear-over-yearresultstoseehowattitudesandstrategieshavechanged.Inthisreportyou’lllearnhoworganizationsareadoptingproactivemeasurestodetect,mitigate,andpreventransomwareattacks,enablingyoutomakeinformedchoicesforyourownsecurityprogram.

Keytakeawaysfromthestudy:

1 Ransomwareanditsimpactarerisingafteradecreaseinthepreviousyear?Thenumberofransomwarevictimshassignificantlyincreased

?Morevictimsareagreeingtopayransoms

?Revenuelossisthebiggestnegativeconsequence

2 Alargersecuritybudgetdoesn’tguaranteebettersecurity?Almostallrespondentshaveadedicatedransomwarebudget

?Fewercompaniesreceivedapost-attackbudgetbump

?Topexecutivesandboardsareclearlyconcerned

3 Stealthattacksrequiremulti-layereddefenses?Attackers’techniquesshifttodataexfiltration

?Cloudandapplicationsovertakeemailasthetopattackvectors

?InvestmentinPrivilegedAccessManagement(PAM)significantlyincreases

?Incidentresponseplansaremorecommonlyadopteda