Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean

Ransomware and other active threats

Ransomware, targeted attacks, and scams not only persist but also evolve into more menacing threats.

In our survey, we asked the respondents to rank threats such as ransomware, targeted attacks, and scams in terms of how much they posed a security challenge. An overwhelming majority answered “a great deal,” while the second most frequent answer was “a lot.” 

How online threats (ransomware, targeted attacks, scams, etc.) were ranked as a security challenge by the survey respondents

This response is not surprising since high-profile campaigns had been making headlines, with ransomware operators launching attacks on critical industries. Detections of modern ransomware such as REvil (aka Sodinokibi), DarkSide, and Nefilim continued to surge. Modern ransomware families’ use of ransomware-as-a-service (RaaS), double extortion, and advanced techniques helped extend the reach of attacks.

The top 10 ransomware families across OAS member states in terms of file-only counts of ransomware family detections in the first half of 2020 and in the first half of 2021

What industries* were the most affected by ransomware attacks?

• 
  
  Government
• 
  
  Healthcare
• 
  
  Manufacturing
• 
  
  Food and beverage
• 
  
  Technology

*across OAS member states in the first half of 2021

Email threats and malicious URLs, which could be used as entry points for ransomware, targeted attacks, and scams, also proliferated across OAS member states. 

Download our full report, “Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean,” to gain more insights on how ransomware, targeted attacks, and other active threats have been affecting OAS member states.

Cloud and IoT Threats

Relatively new technologies such as the cloud and the internet of things (IoT) or the industrial internet of things (IIoT) might help improve enterprises’ operations, but the misconfiguration of these platforms could lead to security risks.

How adjusting to relatively new technologies such as the cloud and the IoT or the IIoT was ranked as a security challenge by the survey respondents

In our survey, when asked to rank the shift to new technologies in terms of the challenge they posed, most respondents rated it as something that concerned them “a lot.” The option with the next highest number of responses was “a moderate amount,” followed by “a great deal,” and then “none at all.” 

In 2021, cloud systems were targeted through threat campaigns, as in the TeamTNT hacking group’s targeting of AWS credentials and Kubernetes clusters. Consistent across such incidents was the presence of cryptocurrency-mining elements. Cryptocurrency miners were the third most detected malware type across OAS member states in the first half of 2021. MalXMR was the most detected family, with its detections across OAS member states increasing twofold from the first half of 2020.

What were the most detected cryptocurrency miners?*

• 
  
  MalXMR
• 
  
  ToolXMR
• 
  
  MalBTC

*across OAS member states in the first half of 2021

Malicious actors likewise abused the IoT or the IIoT and the connections it enabled. One of the ways this was done was through botnets. Botnet-related detections across OAS member states consisted mostly of those from the northern hemisphere.

The top 10 OAS member states in terms of detections of botnet connections and botnet command-and-control (C&C) servers in the first half of 2021

One of the IoT botnet malware families we continued to observe this year was VPNFilter. This familiar threat compromises routers and storage devices via backdoor accounts and exploits devices from known vendors.

Download our full report, “Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean,” for more information on how the adoption of new technologies such as the cloud and the IoT or the IIoT have affected organizations in OAS member states.