PRECISION WARFARE

The growing use of AI in cybersecurity attacks is undeniable

Gone are the days when the image of a lone hacker dominated the cybersecurity threat landscape. Today, cyber hacking has evolved into a thriving multibillion-dollar enterprise, complete with structured hierarchies and substantial research and development budgets. Attackers wield sophisticated tools, including artificial intelligence, machine learning, and automation.

The rise of other technologies and capabilities is contributing to the increased prevalence of well-known attack methods like ransomware and phishing. The advent of ransomware-as- a-service and the widespread adoption of cryptocurrencies has significantly reduced the barriers to entry for launching ransomware attacks. Consequently, there has been a twofold increase in the frequency of these attacks annually since 2019.

Interestingly, disruptions in various forms often act as catalysts for a surge in ransomware attacks. A notable instance occurred during the initial wave of the Covid-19 pandemic, between February ‘20 and March ‘20, when the global count of ransomware attacks increased by 148%. In a similar vein, phishing attacks spiked astonishingly by 510% from January ‘20 to February ‘20.

Soon, attackers will be able to accelerate the end-to-end attack life cycle, spanning from reconnaissance to exploitation from weeks to mere days or even hours. A notable example is Emotet, an advanced malware variant that specifically targets financial institutions. Emotet has demonstrated its ability to dynamically adapt its attack methods.

In 2020, it leveraged advanced AI and machine-learning techniques to increase its effectiveness. Employing an automated approach, Emotet sent out contextually customized phishing emails, integrating other email threats into its campaign. This even included exploiting topics related to Covid-19 communications.