构建数字时代的反欺诈防线_系统性治理路径_31页_4mb

Summary of "Fighting Cyber-Enabled Fraud: A Systemic Defence Approach"

Core Content

This white paper by the World Economic Forum and the Institute for Security and Technology (IST) outlines a systemic approach to combatting phishing and cyber-enabled fraud. It emphasizes the need for a coordinated, multistakeholder effort to shift responsibility upstream, from end users and SMEs to the foundational digital infrastructure providers. The paper presents a three-pillar framework: Prevention, Protection, and Mitigation, each designed to address different aspects of the threat landscape and enhance the resilience of the digital ecosystem.

Main Points

• Phishing and Cyber-Enabled Fraud are Growing Threats:

  • These threats have escalated significantly, with losses exceeding $1 trillion in 2024.
  • They are becoming more sophisticated, leveraging AI and transnational networks.
  • Phishing remains the backbone of these attacks, with a variety of delivery methods including email, SMS, and voice calls.

• Systemic Defence Framework:

  • The framework aims to prevent, protect, and mitigate cyber-enabled fraud across the digital ecosystem.
  • It is positioned between public awareness initiatives and law enforcement disruption campaigns, focusing on structural and policy interventions.

• Three Pillars of Systemic Defence:

  1. Prevention: Reducing the ability of bad actors to acquire or operate digital infrastructure for malicious purposes.
  2. Protection: Embedding user safety into consumer-facing services through proactive and scalable solutions.
  3. Mitigation: Enabling rapid and collective response to cyber threats through signal sharing and AI-assisted threat detection.

Key Information

Prevention

• Upstream Infrastructure Services: These include backbone ISPs, DNS, PKI, web hosting, and CDNs.
• Domain Registration and Abuse: Cybercriminals exploit domain registration services, often through automation and bulk registration.
  • In 2024, over 8.6 million unique domains were used in cyberattacks, an 81% increase from the previous year.
  • A mere 20 registrars out of over 3,000 accounted for nearly 84% of maliciously registered domains.
• Subdomains: Used in a significant portion of phishing attacks, with 24% to 36.27% of attacks using subdomains.
• Reverse Proxy Services: Provide anonymity and legitimacy to phishing infrastructure, masking the true origin of malicious websites.
• Automation and APIs: Enable rapid deployment of phishing infrastructure, increasing the scale and speed of attacks.
• Domain Hijacking: Through account takeover, attackers can seize control of domains to launch phishing campaigns and other fraud activities.

Protection

• Consumer-Facing Services: Such as email, browsers, and messaging platforms must be designed with user safety in mind.
• National Coordination Hubs: Governments can drive adoption of security measures and provide incentives to enhance digital safety.
• Proactive Safeguards: These include alerts, shielding, and empowering users against fraud and phishing.

Mitigation

• Ecosystem-Wide Signal Sharing: Involves the exchange of verified, privacy-preserving indicators of abuse.
• Incentives for Stakeholders: Promote effective action against cyber threats.
• AI-Assisted Threat Detection: Enhances collaboration and enables rapid response to contain sophisticated criminal infrastructures.

Conclusion

• The paper calls for a collective, forward-leaning action to strengthen the digital ecosystem against cyber-enabled fraud.
• It highlights the importance of collaboration among governments, businesses, and individuals, as well as the need for policy reforms and improved coordination.
• By shifting responsibility upstream and enhancing systemic defences, the digital ecosystem can be made more secure and resilient.

Technical Terms

• Phishing-as-a-Service (PhaaS): A subset of crime-as-a-service (CaaS) that provides pre-built phishing tools and platforms.
• Domain Name System (DNS): A system that translates domain names into IP addresses.
• Public Key Infrastructure (PKI): A framework for creating, managing, distributing, and using digital certificates.
• Reverse Proxy Services: Used to mask the origin of malicious websites and provide anonymity.
• Generative AI: Used to create more convincing and effective phishing attacks.

This white paper serves as a call to action for all stakeholders to work together in building a more secure and resilient digital ecosystem.