The coronavirus pandemic has forced massive changes upon businesses, but the overall cyber threat landscape remains relatively stable, according to researchers at FireEye.
Yes, malicious actors are now leveraging global fears to create phishing schemes built around COVID-19. But the main threat actors are still the same and their methodologies, offensive weapons and goals remain largely consistent, reports FireEye analyst Sandra Joyce in a company blog post. And despite widespread reports of adversaries incorporating COVID-19 into their social engineering and phishing campaigns, FireEye said that only two percent of its malicious email detections in March 2020 actually involved coronavirus content.
"The same threat actors and malware families that we observed prior to the crisis are largely pursuing the same objectives as before the crisis, using many of the same tools. They are simply now leveraging the crisis as a means of social engineering," writes Joyce. "This pattern of behavior is familiar. Threat actors have always capitalized on major events and crises to entice users. Many of the actors who are now using this approach have been tracked for years."
Please register to continue.
Already registered? Log in.
Once you register, you'll receive:
The context and insight you need to stay abreast of the most important developments in cybersecurity. CISO and practitioner perspectives; strategy and tactics; solutions and innovation; policy and regulation.
Unlimited access to nearly 20 years of SC Media industry analysis and news-you-can-use.
SC Media’s essential morning briefing for cybersecurity professionals.
One-click access to our extensive program of virtual events, with convenient calendar reminders and ability to earn CISSP credits.