Month: May 2021

– Healthcare, finance and manufacturing industries hit hard as attackers take advantage of global destabilization

– Application attacks spike, accounting for 67% of all attacks as remote-access becomes a common vulnerability

– Cryptocurrency miners reach new heights, accounting for 41% of all detected malware

NTT Ltd., a world-leading global technology services provider, today launched its 2021 Global Threat Intelligence Report (GTIR), which reveals how hackers are taking advantage of the global destabilization by targeting essential industries and common vulnerabilities from the shift to remote working. Healthcare, manufacturing, and finance industries all saw an increase in attacks (200%, 300%, and 53% respectively), with these top three sectors accounting for a combined total of 62% of all attacks in 2020, up 11% from 2019. 

As organizations race to offer more virtual, remote access through the use of client portals, application-specific and web-application attacks spiked, accounting for 67% of all attacks, which has more than doubled in the past two years. Healthcare bore the brunt of these attacks from its shift to telehealth and remote care, with 97% of all hostile activity targeted at the industry being web-application or application-specific attacks.

The GTIR provides insights from NTT’s Cybersecurity Advisory that applies a maturity score of an industry’s security program, with a higher number indicating a more mature plan of action. Concerningly, healthcare and manufacturing have relatively low maturity scores of only 1.02 and 1.21, respectively. These have decreased from 2019’s baseline of 1.12 and 1.32, while attack rates have significantly risen. Manufacturing has experienced a three-year decline in scores, most likely due to changes in the operating environment and the evolution of attacks. On the other hand, finance continued to demonstrate the highest maturity benchmark score for the third consecutive year, of 1.84, a 0.02 decrease on last year, however. 

Kazu Yozawa, CEO of NTT’s Security division, says: “Last year we predicted a surge in targeted, opportunistic attacks and unfortunately, this has proven all-too-true. While these industries have done their best to maintain essential services throughout disruptive times, the fall in security standards when companies need them most is alarming. As services continue to move online and become increasingly digital to account for the new normal, organizations must be extra vigilant in upholding and maintaining best practices in their security.”

Malware sees a metamorphosis: Crypto malware surges while Trojans become more common

While malware is becoming more commoditized in features and functionality, it also became more diverse over the last year with the growth of multi-function malware. Cryptominers have replaced spyware as the most common malware in the world, but the use of certain variants of malware against specific industries continues to evolve. Worms appeared most frequently in the finance and manufacturing sectors. Healthcare was impacted by remote access trojans, while the technology industry was targetted by ransomware.  The education sector was hit by cryptominers due to the popularization of mining among students who exploit unprotected infrastructures.

The crypto-currency market is a prime example, with cryptominers accounting for a staggering 41% of all detected malware in 2020. XMRig coinminer was the most common variant, representing nearly 82% of all coinminer activity and nearly 99% in EMEA specifically. 

Mark Thomas, who leads NTT’s Global Threat Intelligence Center comments: “On one hand you have threat actors taking advantage of a global disaster, and on the other, cybercriminals capitalizing on unprecedented market booms. The common thread throughout both of these situations is unpredictability and risk. Changes in operating models or adoption of new technologies present opportunities for malicious actors and with a surging crypto-currency market popular among inexperienced students; attacks were bound to happen. Now, as we enter a more stable phase of the pandemic, organizations and individuals alike must prioritize cybersecurity hygiene across all industries, including the supply chain.”

Further 2021 GTIR highlights:

• Attacks against manufacturing increased from 7% last year to 22%; healthcare increased from 7% to 17%; and finance is up from 15% to 23%.
• Organizations in multiple industries saw attacks related to the COVID-19 vaccine and associated supply chains.
• COVID-19 cybercriminal opportunism intensified, with groups such as the Ozie Team, Agent Tesla and TA505, along with nation-state actors like Vicious Panda, Mustang Panda and Cozy Bear very active in 2020.
• The most commonly occurring forms of malware in 2020 were Miners: 41%; Trojans: 26%; Worms: 10%, Ransomware 6%.
• Cryptominers dominated activity in Europe, the Middle East and Africa (EMEA) and the Americas but were relatively rare in Asia Pacific (APAC).  
• OpenSSL was the most targeted technology in the Americas but was not even on the top 10 list in APAC.  
• Ongoing fallout following the Schrems II decision invalidated the EU-US Privacy Shield and placed additional obligations on organizations transferring personal data from the EU to third countries.
• NTT’s research shows that 50% of organizations globally are prioritizing securing their cloud services – making it the top cybersecurity focus over the next 18 months.

To learn more about how this year’s report offers organizations a robust framework to address today’s cyber threat landscape, follow the link to download the NTT Ltd. 2021 GTIR.

ENDS

Regional breakdown

The Americas:

• OpenSSL was the most targeted technology in the Americas but was not even on the top 10 list in APAC.
• Business and professional services was the most attacked industry in the Americas, accounting for 26% of all attacks.
• The US accounted for two of the highest rates of reconnaissance activity of any country analysed: 
  • Some 64% of all hostile activity targeting the technology industry was some form of reconnaissance.  
  • In the education industry, 58% of all hostile activity was reconnaissance.  
• The Americas observed 8% of all attacks as DoS/DDoS attacks, while these attacks accounted for under 4% in APAC and 1% in EMEA.
• With 34% of all malware detections, XMRig was the most detected malware in the Americas and in the US.

EMEA:

• EMEA experienced 79% of all attacks as combined application-specific (42%) and web-application (37%) attacks. 
  • At 91% of all such attacks, the UK had the highest rate of combined web attacks of any country analysed.
• Healthcare was the most attacked industry in EMEA.
  • The combined attacks from web-application (62%) and application-specific (36%) attacks targeting healthcare in EMEA accounted for 98% of all hostile activity in this sector.  This is well above the global average of 67%.
• XMRig accounted for nearly 99% of all miner activity in EMEA and for over 87% of all malware detections.
• Trojans were the second most common form of malware within EMEA.
  • In the UK&I, six of the 10 most observed malware were some form of Trojan.

APAC + ANZ:

• Malware varied greatly throughout APAC, but webshells, botnets, and all forms of Trojans combined to account for 72% of all malware. While XMRig was the most commonly detected malware globally, no country in APAC showed XMRig in their top 10 most common malware.
• In APAC, finance (24%) was the most attacked industry, followed by manufacturing (22%).
• In ANZ, finance (42%) accounted for almost half of all attacks, followed by education (24%). 
• Healthcare industry maturity severely lacking in APAC and AU at 0.60 and 0.96, below global average of 1.02. Largest gap is APAC with 2.53 to target state.
• Technology sector (2.02) was more mature than the global average (1.64).

A New Era of Beauty for the People and the Planet

Now more than ever, people are becoming more and more conscious about what they buy and consume, supporting brands that align with their values and offer products that do more good than harm. In the same way, companies and brands have been shifting to adopt the same level of responsibility when it comes to the products they offer and the messages they send to their audiences, resulting in purposeful actions that demonstrate care not just for people but also for the planet.

Unilever, one of the leading global corporations, recognizes their role in doing just that and in recent years, has been reinforcing positive action across its brands. In the Philippines, the company’s Beauty and Personal Care Category, home to beloved brands like Cream Silk, Pond’s, Lifebuoy, Closeup and Love Beauty and Planet, to name a few, unveils its renewed purpose called Yes to Positive Beauty. This is a commitment to bring about positive change through real actions – to do more good, not just less harm, for people and the planet. 

“Our new thrust, Yes to Positive Beauty, is a movement not just for us, but for all Filipinos to champion a new era of beauty and personal care that’s inclusive, equitable and sustainable,” says Dorothy Dee-Ching, Unilever Philippines’ Vice President for Beauty and Personal Care. “As the number one beauty and personal care company in the country, we acknowledge the part we play in being a force for good, and Yes to Positive Beauty encompasses our commitment to do this through our brands.”

Four Steps to Positive Beauty

As the beginning of their commitment towards doing more good, Unilever Philippines identifies four key pillars of purpose:

1. Yes to health and wellbeing

After a year that has heightened the importance of health and hygiene, Unilever commits to making hygiene more accessible and affordable for all Filipino families. Partnering with the Philippine Public Health Association, Unilever, through its trusted brands Lifebuoy and Closeup, launched the Hygiene 101 Campaign, a digital information drive equipping Filipinos with 101 hygiene practices to live by.

2. Yes to equal opportunities

Pushing forward the agenda on gender equity, Unilever makes a conscientious effort to provide opportunities for Filipinos across the country. Starting in 2020, Unilever partnered with Mano Amiga and Shopee to create a grant for up to 25 microentrepreneurs to start or restart their business. The grant included not just monetary funding, but also access to training programs for skills needed to sustain their enterprise, and the Shopee marketplace to give life to their business online.

Another partnership piloted in 2020, Cream Silk has teamed up with Edukasyon.ph, the largest education technology platform in the country, to provide Filipinas with the tools they need to be ready for the next opportunity. This 2021, they launched the #ConditionedForGreater Online Academy, a series of free one-hour certificate courses aligned with skills needed to land a new job, even during a recession. 

3. Yes to beauty inclusivity

As one of the top advertisers in the country, Unilever also recognizes how its brands can do their part in shifting beauty standards to combat discrimination and championing inclusion not just in their communications but also across all efforts. The company’s flagbearer for all kinds of beauty, Dove has continued to create safe spaces for all Filipinos to embrace their unique beauty. This year, Pond’s is shifting its products and campaigns to veer away from whitening, empowering Filipinas to love and care for their skin.

Just this April, Unilever also launched its very own online portal www.BeautyHub.ph, a content hub celebrating a progressive, inclusive and tolerant world, representing all types of shapes, sizes, orientations, ages, religions and more. Your everyday beauty expert, www.BeautyHub.PH celebrates unique experiences through features and content that’s helpful, authentic and positive.

4. Yes to sustainability

In order to reduce their environmental impact and reinforce its commitment towards more sustainable practices, Unilever has taken key steps across its personal care brands to use less or better plastic. 

Unilever says yes to sustainability by saying no to bubble wrap and replacing it with sustainable eco-wrap for purchases from E-commerce platform Shopee. The company is taking this small step as they continue working with partners to optimize their packaging and further reduce plastic use.

Saying Yes to Positive Beauty

Inviting everyone to join them in their renewed commitment, Unilever is kicking off their Yes to Positive Beauty Sale this May 17-19, 2021 with Shopee! Apart from saying yes to exciting deals and discounts from your favorite brands, like Dove, TRESemme, Cream Silk, Pond’s, St. Ives, Love Beauty and Planet, and more, you’ll be saying yes to sustainability, as Unilever will be rolling out its sustainable eco-wrap packaging for orders with five items and above.

You’ll also be saying yes to equal opportunities and supporting small businesses through Mano Amiga, an organization that creates education and development initiatives to uplift communities in need. With the proceeds from the sale, Mano Amiga will be continuing its program granting microentrepreneurs access to the necessary funds and training courses to help them start, sustain or scale their businesses.

Shoppers can also look forward to the following special deals and freebies during the three-day sale:

• Additional 15% off when you use the code POSITIVEBEAUTY and many more vouchers throughout the weekend
• Flash sales, with deals as low as Php 29
• Free stickers with every purchase
• First 500 orders with min. spend Php 1,499 get a limited edition tote bag 
• First 400 orders with min. spend Php 1,999 get a limited edition bucket hat 
• A portion of the proceeds will help support small businesses in partnership with Mano Amiga. 
• Check out the Positive Beauty Community Sale happening on May 18 featuring the small businesses we supported last year.

Join Unilever in saying Yes to Positive Beauty this May 17-19 on Shopee, and say yes to a new era of beauty. Add to cart and check out on May 17, 12-2am. 

For more information on Unilever’s Yes to Positive Beauty commitment visit https://www.beautyhub.ph/fitness-well-being/positive-beauty-and-personal-care 

Check out our offers at the Unilever Beauty Official Store: https://shopee.ph/unilever_personalcare   and the Positive Beauty Sale on May 17-19: https://shopee.ph/m/unilever-super-brand-day