Crimeware-as-a-service

The Crimeware-as-a-Service (CaaS) model gives cybercriminals a way to automate their unauthorized and often illegal activities on the Internet. And they can earn a significant amount of money very quickly using CaaS. Recently, Cloud Threat Labs (CTL), now part of Symantec Corporation discovered that hackers are using Google Drive to host Facebook Phishing and Account hijacking tools. Multiple versions of these tools were found on Google Drive.

“Terrorist-related groups will attack population centers with crimeware-as-a-service. While terrorist-related groups have been tormenting organizations and individuals for years, we anticipate more potentially destructive attacks in 2019. Instead of breaking systems with ransomware, adversaries will leverage new tools to conduct harmful assaults on targeted subjects and organizations.

From attacks on data integrity that essentially kill computers to the point of mandatory hardware replacements, to leveraging new technology for physical assaults such as the recent drone attack in Venezuela, attack surfaces are growing and enemies will take advantage. To combat this, organizations must take inventory of their attack landscape to identify and mitigate potential threats before they are exploited.