KROLL-2025年3月威胁情报焦点报告（英）_23页_920kb

Kroll Threat Intelligence Spotlight Trends Report Summary (March 2025)

This report highlights key cybersecurity threats and trends observed by Kroll's Threat Intelligence team. Major focus areas include:

• Extortion and Ransomware: Reports on ransomware attacks by various threat actors and data breaches targeting companies, including a notable breach of Gravy Analytics' geolocation data.
• Phishing Campaigns and Spear Phishing: Techniques used to compromise organizations, emphasizing the vulnerability of email systems and digital footprints.
• Supply Chain Attacks: Exploitation of third-party software and tools, such as vulnerabilities in apps and frameworks like Windows and Adobe.
• Critical Infrastructure and Industrial Control Systems: Rising threats targeting ICS/SCADA systems, industrial IoT (IIoT), and network-facing devices.
• New Vulnerabilities: Exploitation of the Internet of Things (IoT) and vulnerabilities in web applications and cloud environments.
• AI and Deepfake Threats: Increasing use of deepfake technology in social engineering attacks.
• Security Misconfigurations: Common misconfigurations that lead to data leaks, ransomware attacks, and data breaches.

Upcoming Events and Updates:

• New Kroll publications and security conferences like KubeCon will be featured, offering insights into future security advancements.

Key Takeaways

• Organizations face evolving threats from state-sponsored and criminal actors targeting critical infrastructure, supply chains, and data integrity.
• Emphasis on advanced detection and response (XDR) technologies to mitigate risks.
• Collaboration with security operations centers (SOCs) and offensive security teams is crucial for proactive defense.
• Recommendations include strengthening supply chain security, improving email hygiene, and enhancing incident response capabilities.