In this year’s Annual Cyber Threat Monitor Report, we take a look back at the key events that shaped the cyber threat landscape in 2023, as well as looking ahead at the year to come, sharing insights from our Cyber Threat Intelligence team here at NCC Group.
2023 showed signs that the international community is beginning to take the threats from cyber adversaries more seriously. We saw several examples of coordinated law enforcement action against criminal groups, including key ransomware operators and individuals believed to be acting on behalf of foreign intelligence services.
There was also consensus on the issue of ransomware, in that governments around the world have shown a united front against ransom payments and intelligence sharing through The International Counter Ransomware Initiative, which introduced several measures that offer a real opportunity to fight back against the pervasive threat from ransomware operators.
However, despite this, we saw the highest volume of ransomware victims NCC Group has ever recorded, with an 84% increase in 2023 alone. The sheer volume of attacks and different types of victims proves that no organization is safe.
Ransomware operators employed new and innovative techniques to maximize their profits, targeting prominent software creators and managed service providers. So, even if an organization does not perceive a direct threat from ransomware, it should consider the potential impact on its supply chain.
The ongoing global threat to critical national infrastructure by hacktivists and foreign intelligence services continued in 2023, following multiple geopolitical conflicts in the Middle East, Eastern Europe, and Asia. National Cyber Security Centers in multiple countries have highlighted this threat, and it is something we are monitoring as a priority moving into 2024.
With those few things in mind, here we give further insight into what was a challenging 2023 and what organizations should focus on in the year ahead.