A report from cybersecurity company Sekoia highlights the evolving threat landscape in the financial sector. Phishing remains the top digital crime in 2022, with the financial industry being the most targeted sector. Phishing-as-a-service has become increasingly popular, with cybercriminals purchasing phishing kits to impersonate financial organizations and collect login credentials. QR code phishing campaigns are also on the rise, as attackers use QR codes to deceive users into providing personal information. Business email compromise campaigns have increased, with attackers now impersonating vendors or business partners. Open-source software supply chain attacks have seen a significant increase, with the banking sector being specifically targeted. Mobile banking Trojans and spyware are also growing concerns for the financial industry. Ransomware attacks heavily impact the sector, with attackers shifting to exfiltration-based extortion. Decentralized finance platforms and blockchain bridges are targeted by state-sponsored threat actors, with significant amounts of money being stolen. Attribution of attacks in the financial sector can be challenging, as some attackers disguise their operations as financially motivated when they are actually espionage operations.
Source link