More sophisticated state-backed hacks emerge amid cyberespionage shift

CyberScoop reports that state-sponsored threat operations have increased in both sophistication and aggression amid a growing focus on cyberespionage rather than high-profile intrusions. Stronger offensive cyber operations and integration of influence campaigns in attacks by Iranian state-backed hackers during the past year are indicative of such advancement, a Microsoft report revealed. "They seem to be more intentional and focused in their targeting than we've seen before. They're getting better at leveraging vulnerabilities, they're getting better at focused, real cyber operations, so we see them evolving," said Microsoft Director of Threat Intelligence Strategy Sherrod DeGrippo. The U.S., Ukraine, and Israel were most targeted by nation-state attacks, while an over 200% increase was observed in human-operated ransomware intrusions. The report also showed that while dwell times have declined, systems targeting, file exfiltration and encryption, and ransom efforts have accelerated. Microsoft Corporate Vice President for Customer Security and Trust Tom Burt noted the company's commitment to further collaborate with law enforcement and private sector organizations in curbing cybercrime.