The rapid adoption of Generative AI (GenAI) technologies has led to a significant increase in sophisticated phishing campaigns. A recent study by Abnormal Security reveals that 80% of these campaigns now leverage GenAI tools, marking a critical turning point in the fight against digital fraud.

The integration of AI in phishing attacks has led to a dramatic 1265% increase in such incidents since 2022, as reported by InfoSecurity Magazine. The availability of free or trial-based AI tools, such as ChatGPT, has made it easier for cybercriminals to generate convincing phishing content, with the potential to create up to 30 templates per hour.

AI’s role in evolving phishing techniques

AI’s proficiency in generating high-quality content has significantly reduced the effectiveness of traditional phishing detection methods. AI-based proofreading tools can eliminate common phishing indicators, making attacks more challenging to identify.

The rapid response rates of AI models, like ChatGPT’s 15-20 seconds and the 3.5 Turbo Model API’s under 3 seconds, further enhance the efficiency of these attacks.

Lukas Junokas, Chief Technology Officer at Breezit, an event planning platform, shares a challenging encounter with a phishing email that closely imitated the writing style of a high-ranking executive, asking for confidential information. This email managed to evade standard detection filters because of its authenticity.

“Generative AI has undeniably transformed phishing, making attacks more personalized and harder to detect. The new challenge lies in the arms race between evolving AI capabilities in both creating and detecting sophisticated threats,” Lukas noted.

The emergence of malicious-AI-as-a-service

The concept of ‘Malicious-AI-as-a-Service’ is gaining traction, facilitating the automation and scaling of phishing operations. This development lowers the entry barrier for cybercrime, enabling even those with minimal technical skills to execute sophisticated attacks.

Valentin Rusu, Head of Malware Research and Analysis at Heimdal, highlights the potential dangers of Reinforced Learning in black-hat hacking.

“Imagine a hacker training an AI to break security systems through trial and error.” “This could lead to unprecedented cybersecurity challenges,” Rusu remarked.

Adelina Deaconu, Heimdal’s MXDR (SOC) Team Lead, adds that genAI has the potential to exploit personal vulnerabilities and advises people to step back if something seems suspicious.

“I’m especially worried about how generative AI can now analyze and exploit personal vulnerabilities and emotions, making the emails seem more convincing. I advise people to step back, verify information, and report any concerns. If something seems suspicious, it likely is,” says Adelina.

Brian David Crane, founder of CallerSmart, an app for investigating mystery phone numbers, believes that generative AI can scale up spear phishing and vishing attacks.

“With generative AI, cyberattacks can happen at scale, be relentless with malware code modification and generative chatbots using spear phishing & vishing attacks with an automated selection of targets based on publicly available data or information,” says David.

 Statistical insights: the growing AI threat

• 83% of companies prioritize AI over other technologies (Notta AI).
• 51% of businesses rely on AI for threat detection and remediation (EFT Sure).
• One in five people will open AI-generated phishing emails (SoSafe Awareness).
• 69% of organizations stated that they could not avert cyber-attacks without AI (CapGemini).

The way forward: awareness and vigilance

As AI continues to evolve, organizations and individuals must stay informed and exert caution when opening emails.

 “People should pay attention to strange email addresses, tone of the email, requests for sensitive information, signature and formatting, and should avoid clicking on URLs (hover over them first and see if the displayed URL matches the visible text),” says Adelina.

Understanding the capabilities and potential misuse of AI in phishing is the first step toward developing more effective countermeasures.

Source: Heimdal Security

The post The escalating threat of AI-driven phishing appeared first on CIO Dimension.

A Palo Alto survey findings revealed that, although India saw a remarkable 75% increase in cybersecurity budget allocation for 2023 compared to the previous year (one of the highest increases in the APAC region), it also experienced the highest number of disruptive cyber attacks.

Palo Alto Networks surveyed 200 Indian IT decision-makers, CTOs, CIOs, and Senior Directors to understand the state of cybersecurity in India. The respondents belonged to sectors such as Banking & Finance, Essential Services, Telco/Tech/Communications, Retail/Hotel/F&B, Transport & Logistics, and Manufacturing. 

India faces a substantial risk of cyber attacks targeting its critical infrastructure, public sector, and essential services, according to the findings. A notable 67% of Indian government and essential service entities reported encountering a surge of over 50% in disruptive attacks.

Key findings from the survey include:

Industries:

• 66% of Indian manufacturing firms faced increased risks from unsecured IoT devices connected to the network, far more than other sectors.
• 83% of Transport and Logistics organizations perceive their risk level as high or very high.
• An overwhelming 95% of businesses in India claim they are actively moving to an increasingly automated security stack.
• 48% of Indian Public, Transport & Logistics organizations and 50% of Manufacturing organizations sectors believe 5G adoption will widen security loopholes.
• A higher than average 34% of Indian banking and financial services say cloud attacks will disrupt business. 
• 69% of Indian Telcos have faced newfound risks from increased reliance on cloud-based services and apps.

Cybersecurity risks:

• 45% of Indian businesses saw more than 50% increase in disruptive attacks – the highest in APAC. 
• 67% of Indian government and essential services experienced more than 50% increase in disruptive attacks.
• At 35% Indian organizations are more concerned about social engineering attacks than the APAC average (29%). 
• 60% of Indian organizations are concerned about malware (ransomware, spyware, adware) attacks the most. 57% of Indian Telcos are concerned about Ransomware the most. 
• 94% of Indian organizations perform regular assessments and forensics for OT related cybersecurity incidents, this is positive news. Likely driven by the fact that 89% of these organizations have IT and OT cybersecurity professionals working under the same/ combined team, higher than the SEA average of 82%.
• On the other hand, 24% of these organizations have their OT systems connected with their Enterprise IT network (not fully air gapped or protected via a dematerialized zone); a definite cause of concern.

Security outlook:

• 68% of Indian respondents say ChatGPT will positively impact business tasks like content creation and report generation.
• India leads APAC in cloud migration, with 80% of businesses already having a large proportion of infrastructure on the cloud.
• Over 80% of Indian businesses discuss cybersecurity at the board level at least every quarter. 
• 42% of Indian organizations say they are adjusting their cybersecurity strategy to adopt cloud security. 
• 94% of Indian organizations said they have a 5G strategy in place. However, 45% of these organizations said that proper segmentation of 5G networks was of top concern to them (highest in APAC). 

“Securing essential services networks is crucial to protect critical infrastructure and ensure the uninterrupted delivery of essential services, safeguarding public safety and national stability. Our findings show that the transport, manufacturing, and public sectors have borne the brunt of advanced attacks. As India embraces digital transformation, it is mission critical to have a cybersecurity-first approach,” said Anil Valluri, Managing Director & Regional Vice President of India & SAARC, Palo Alto Networks.

The post Disruptive cyber attacks on the rise despite a big leap in cybersecurity budgets  appeared first on CIO Dimension.

The fourth annual Data Protection Trends Report from Veeam found that companies are challenged with more complex hybrid IT environments and are raising budgets to fend off cyberattacks as well as keep up as production environments continue to diversify across various clouds. The result is that IT leaders feel they aren’t sufficiently protected. A top priority of organizations this year is improving reliability and success of backups, followed by ensuring that Infrastructure as a Service (IaaS) and Software as a Service (SaaS) protection is equitable to the protection they rely on for datacenter-centric workloads.

Highlights of the Veeam Data Protection Trends Report 2023:

• Modern Data Protection is needed to keep businesses running: Four out of five organizations believe that they have a gap, or a sense of dissatisfaction or anxiety, between what their business units expect and what IT services can deliver. 82% have an ‘Availability Gap’ between how quickly they need systems to be recoverable and how quickly IT can bring them back. 79% cite a ‘Protection Gap’ between how much data they can lose and how frequently IT protects their data. 
• Data protection budgets are increasing: Globally, organizations expect to increase their data protection budget in 2023 by 5%, which is notably higher than overall spending plans in other areas of IT. Of the 85% of organizations planning on increasing their data protection budgets, their average planned increase is 8.3% and often in concert with increased investments in cybersecurity tools.
• Despite the awareness and increase in preparedness, ransomware is winning: Cyberattacks caused the most impactful outages for organizations in 2020, 2021 and 2022, according to the report. 85% of organizations were attacked at least once in the past 12 months; up from 76% in last year’s report. Specifically, recovery is a main concern as organizations reported that only 55% of their encrypted/destroyed data was recoverable from attacks. According to the survey, the single most important aspect that organizations are looking for in a Modern Data Protection solution is the “integration of data protection within a cyber preparedness strategy.”
• Ransomware is the biggest hindrance to Digital Transformation: Due to its burden on budgets and manpower, ransomware and the current volatile cyber security landscape are taking priority for IT teams. This is causing IT resources and budgets originally allocated towards Digital Transformation initiatives to pivot to cyber prevention. 
• Container-centric workloads are growing in popularity: Containers, and more specifically Kubernetes, show all the characteristics of a mainstream production platform, with the same kinds of data protection strategy disparities as seen in early adopters of SaaS five years ago or virtualization 15 years ago. 52% of respondents are currently running containers, while 40% of organizations are planning to deploy containers – and yet, most organizations are merely protecting the underlying storage, instead of holistically protecting the workloads themselves. 

“IT leaders are facing a dual challenge. They are building and supporting increasingly complex hybrid environments, while the volume and sophistication of cyberattacks is increasing,” said Danny Allan, CTO and Senior Vice President of Product Strategy at Veeam. “This is a major concern as leaders think through how they mitigate and recover business operations from any type of disruption. Legacy backup approaches won’t address modern workloads – from IaaS and SaaS to containers – and result in an unreliable and slow recovery for the business when it’s needed most. This is what’s focusing the minds of IT leaders as they consider their cyber resiliency plan. They need Modern Data Protection.”

The post IT leaders feel increasingly unprotected from cyberattacks appeared first on CIO Dimension.