According to the recent Kaspersky Incident Response analyst report, long-lasting attacks that persist for more than a month accounted for 35.2% of the total attacks in 2024.
The Kaspersky Incident Response analyst report offers detailed analysis of cyberattacks that Kaspersky investigated in 2024. It draws upon information from organizations that required assistance during security incidents and identifies emerging trends in threats across different industries and regions. This report serves as a valuable resource for organizations looking to improve their security operations and prepare for future incidents effectively.
The recent report indicates that the average duration of long-lasting cyberattacks, measured in median days, is a staggering 253 days. In response to these incidents, the median duration of incident response efforts was found to be 50 hours, showcasing the complexity and challenge in mitigating the impact of such attacks.
The primary impacts of long-lasting cyberattacks were identified as data encryption and leakage, posing significant risks to organizations. The initial vectors for these attacks predominantly include exploits targeting public-facing applications, leveraging trusted relationships and utilizing valid accounts.
“Understanding the evolving landscape of cyber threats is crucial for any organization striving to safeguard its assets and processes. Our findings reveal that the resilience of cybercriminals grows as technology advances, pushing organizations to not only respond but also to anticipate and adapt their security measures proactively,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.
To strengthen your company’s protection against sophisticated attacks, deploy robust cybersecurity solutions and hire qualified practitioners to manage them or adopt managed security services such as Managed Detection and Response and Incident Response. These security services encompass the complete incident management cycle from threat identification to continuous protection and remediation. They assist in safeguarding against evasive cyberattacks, investigating incidents and offering expert support even if a company lacks security workers.
The full Incident Response analyst report 2024 is available via this link.
