Quarterly Report: Incident Response trends from Q3 2021>
Talos Blog – David Liebenberg And Caitlin Huey
TARGETING Actors targeted a broad range of verticals, including manufacturing, non-profit, health care, hospitality, local government, financial services, IT, entertainment, retail, heavy equipment manufacturing, utilities, food manufacturing, real estate and telecoms. Attackers targeted local government organizations the most often, breaking a three-quarter streak in which health care was the most targeted sector.  THREATS Ransomware was the clear top threat this quarter, accounting for about 38 percent of all threats. This is a continuation of last quarter, though ransomware took up a bigger share of all threats with 46 percent. There were a number of new ransomware families observed this quarter:  ⢠Vice Society ⢠Hive ⢠Karma ⢠Grief ⢠CryptBD ⢠Thanos INITIAL VECTORS or the vast majority of incidents, CTIR could not reasonably determine the initial vector because of logging deficiencies. SECURITY WEAKNESSES  The lack of multi-factor authentication (MFA) remains one of the biggest impediments for enterprise security.
Link: https://blog.talosintelligence.com/2021/10/quarterly-report-incident-response.html