TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

Top Attacks Against Financial Services Organizations 2017–2019

2020-04-27 · Read original ↗

ATT&CK techniques detected

13 predictions
T1110Brute Force
93%
"attacks were conspicuously infrequent. see figure 2 for more details. the financial sector data represented here are at odds with general trends in the europe, middle east and africa theater, where we have noted disproportionate growth in brute force and credential stuffing ( / c…"
T1110.003Password Spraying
87%
". these dumps have a lifespan. eventually someone on the other side will find out about a dump, and organizations can use this to determine if their customers are affected. until that happens, there is a golden window between the initial release of stolen credentials and whatever…"
T1110Brute Force
74%
"2019 have been characterized by two predominant vectors, both of which are growing : brute force and credential stuffing attacks at 41 %, and ddos at 32 %. web attacks ( 8 % ) and malware ( 5 % ) are significantly more rare, as are unidentified attacks and other miscellaneous inc…"
T1498Network Denial of Service
68%
"a simple denial of service scenario, meant to prevent financial services business from operating as usual. some such attacks are motivated by the fact that financial services organizations will lose money from loans that can ’ t be processed and will lose customer confidence if t…"
T1499Endpoint Denial of Service
64%
"a simple denial of service scenario, meant to prevent financial services business from operating as usual. some such attacks are motivated by the fact that financial services organizations will lose money from loans that can ’ t be processed and will lose customer confidence if t…"
T1110.004Credential Stuffing
60%
"their systems and are heavily audited, and thus have robust and strong cybersecurity programs. the protections they have in place may represent too high a bar for crooks to pass, so they fall back to simpler, if less efficient methods, like guessing passwords. oftentimes these at…"
T1110.003Password Spraying
60%
"reused passwords. - brute force : enforce longer pin codes when used. - brute force : implement multi - factor authentication. - brute force : monitor overall number of failed login attempts to detect password spraying. - web attacks : use a web application firewall for web proto…"
T1110Brute Force
60%
"their systems and are heavily audited, and thus have robust and strong cybersecurity programs. the protections they have in place may represent too high a bar for crooks to pass, so they fall back to simpler, if less efficient methods, like guessing passwords. oftentimes these at…"
T1566.002Spearphishing Link
49%
"of that year ’ s application protection report, we found that a greater proportion of financial organizations tended to deploy wafs ( 31 % ), compared to the average across all industries ( 26 % ). most of the web attacks against financial services that the sirt examined took one…"
T1110.004Credential Stuffing
49%
"attacks were conspicuously infrequent. see figure 2 for more details. the financial sector data represented here are at odds with general trends in the europe, middle east and africa theater, where we have noted disproportionate growth in brute force and credential stuffing ( / c…"
T1110Brute Force
46%
"to accept the need for multifactor authentication, even though it probably represents the most impactful way to prevent nearly all access - style attacks like brute force, credential stuffing, and phishing. given that challenge, there is still a range of things organizations can …"
T1110.004Credential Stuffing
34%
"2019 have been characterized by two predominant vectors, both of which are growing : brute force and credential stuffing attacks at 41 %, and ddos at 32 %. web attacks ( 8 % ) and malware ( 5 % ) are significantly more rare, as are unidentified attacks and other miscellaneous inc…"
T1499Endpoint Denial of Service
31%
"risks — dos, access attacks and web attacks — and practice incident response regularly. the financial services industry has seen a lot of change in the last few years, both in how traditional members of this group operate as well as the types of organizations and services that ar…"

Summary

Attackers are targeting financial services organizations with brute force, credential stuffing, and DoS attacks. See how you can mitigate the risks.