As noted by Dark Reading, Italy is experiencing a significantly high volume of cyberattacks that diverge sharply from global patterns. Recent research indicates that organizations within the country are being compromised at rates that exceed expectations based on its economic and political standing.
A report from Intel471 reveals that Italy accounts for 7% of all initial access data sold on cybercriminal forums, ranking second globally behind the United States. Unlike global trends where credential-based attacks predominate, 57% of intrusions in Italy involve exploited vulnerabilities. Furthermore, 49% of initial access sales involve victim-owned web infrastructure, a category rarely cited in global data. Experts suggest three primary theories for this anomaly. First, Italy may lag in cybersecurity maturity, with slower adoption of endpoint detection and response technologies and a reliance on end-of-life software versions. Second, a network effect exists where attackers reuse successful exploitation methods to scale operations across numerous Italian systems efficiently. Finally, the prevalence of small and medium-sized enterprises in Italy makes them attractive, vulnerable targets for cybercriminals. These findings highlight a unique threat landscape where opportunistic actors leverage systemic weaknesses to conduct mass-scale compromises, often selling access in bulk to other malicious entities.
Source: Dark Reading
