Managing The Effects Of AI-Driven Cyber Attacks

Leading cyber protection firm, Acronis, has released the findings of its Mid-Year Cyberthreats Report, called From Innovation to Risk: Managing the Implications of AI-driven Cyberattacks. The is based on data captured from more than one million global endpoints, provides insight into the evolving cyber security landscape and uncovers the growing use of generative Artificial Intelligence (AI) systems, such as ChatGPT, by cyber criminals to craft malicious content and execute sophisticated attacks.

The biannual threat report highlights ransomware as the dominant risk to small and medium-sized businesses. And while the number of new ransomware variants continues to decline, ransomware attacks' severity remains significant. 

Equally concerning is the growing prominence of data stealers, who leverage stolen credentials to gain unauthorised access to sensitive information. “The volume of threats in 2023 has surged relative to last year, a sign that criminals are scaling and enhancing how they compromise systems and execute attacks,” said Candid Wüest, Acronis VP of Research. “To address the dynamic threat landscape, organisations need agile, comprehensive, unified security solutions that provide the necessary visibility to understand attacks, simplify context, and provide efficient remediation of any threat, whether it may be malware, system vulnerability, and everything in between.”

According to the report's findings, phishing is the primary method criminals leverage to unearth login credentials. In the first half of 2023 alone, the number of email-based phishing attacks has surged 464% when compared to 2022. 

Over the same frame, there has also been a 24% increase in attacks per organisation. In the first half of 2023, Acronis-monitored endpoints observed a 15% increase in the number of files and URLs per scanned email. Cyber criminals have also tapped into the burgeoning large language model (LLM)-based AI market, using platforms to create, automate, scale, and improve new attacks through active learning.  

The Cyber Attack Landscape Is Evolving 

Cyber criminals are becoming more sophisticated in their attacks, using AI and existing ransomware code to drill deeper into victims’ systems and extract sensitive information. AI-created malware is adept at avoiding detection in traditional antivirus models and public ransomware cases have exploded relative to last year. 

Acronis-monitored endpoints are picking up valuable data about how these cyber criminals operate and recognises how some attacks have become more intelligent, sophisticated, and difficult to detect.

Drawing from extensive research and analysis, key findings from the Report include:    

  • Acronis blocked almost 50 million URLs at the endpoint in Q1 2023, a 15% increase over Q4 2022. 
  • There were 809 publicly mentioned ransomware cases in Q1 2023, with a 62% spike in March over the monthly average of 270 cases.
  • In Q1 2023, 30.3% of all received emails were spam and 1.3% contained malware or phishing links.  
  • Each malware sample lives an average of 2.1 days in the wild before it disappears. 73% of samples were only seen once.
  • Public AI models are proving an unwitting accomplice for criminals looking for source code vulnerabilities, creating attacks and developing fraud prevention-thwarting attacks like deep fakes. 

 Cyber criminal gangs phish to acquire credentials, extract data and dollars, of note:    

  • Phishing remained the most popular form of stealing credentials, making up 73% of all attacks. Business email compromises (BECs) were second, at 15%.
  • The LockBit gang was responsible for major data breaches.
  • Clop breached a mental health provider’s system, affecting the personal and HIPAA-covered data of more than 783,000 individuals.
  • BlackCat stole more than 2TB of secret military data, which included personal information of employees and customers, from an Indian industrial manufacturer.
  • Vice Society compromised 1,200 servers and the personal information of 43,000 students, 4,000 academic staff and 1,500 administrative staff at the University of Duisburg-Essen in Germany. 

Breaches Demonstrate Major Security Concerns 

Traditional cybersecurity methods and lack of action let attackers in, the report shares:   

  • There is a lack of strong security solutions in place that can detect zero-day vulnerability exploitations.
  • Organisations often fail to update vulnerable software in a timely manner, long after a fix becomes available.  
  • Linux servers face inadequate protection against the cyber criminals who are increasingly going after them.  
  • Not all organisations follow proper data backup protocol, including the 3-2-1 rule.

With these trends in mind, Acronis emphasises the need for proactive cyber protection measures. 

A sound cyber security posture requires a multi-layered solution that combines anti-malware, EDR, DLP, email security, vulnerability assessment, patch management, RMM, and backup capabilities. 

Leveraging an advanced solution that combines AI, machine learning, and behavioural analysis can help mitigate the risks posed by ransomware and data stealers. 

Through ongoing research, development, and collaboration with industry partners, Acronis is committed to empowering individuals and businesses by providing innovative solutions which protect against emerging cyberthreats. 

You Might Also Read: 

Is It Possible To Trust AI Decision-Making In Cybersecurity?:

_________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

 


Cyber Security Intelligence: Captured Organised & Accessible


 

 

« WatchGuard Expands Identity Protection Capabilities
Britain's Biggest Hospital Held To Ransom »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 7,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Phoenix TS

Phoenix TS

Phoenix TS offers world-class management, computer, and IT security certification training courses.

ADF Solutions

ADF Solutions

ADF Solutions is a leading provider of digital forensic and media storage exploitation tools.

SAASPASS

SAASPASS

SAASPASS is a full-stack identity and access management solution, a single product which allows you to manage all your digital and physical access needs securely and conveniently.

DataArt

DataArt

DataArt is a global technology consultancy that designs, develops and supports unique software solutions. Areas of activity include software security testing.

Sequretek

Sequretek

Sequretek was formed with the aim to “Simplify Security”. We envision a future where enterprise networks are streamlined, secure and simple.

YorCyberSec

YorCyberSec

YorCyberSec act as a trusted Cyber and Information Security broker and procurement specialist. We help companies to Reduce Risk, Increase Assurance and Improve Performance.

HEROIC Cybersecurity

HEROIC Cybersecurity

HEROIC’s enterprise cybersecurity services help improve overall organizational security with industry best practices and advanced technology solutions.

Serbus

Serbus

Serbus Secure is a fully managed suite of secure communication, enterprise mobility and mobile device security tools.

U2opia Technology

U2opia Technology

U2opia is a consortium with a proven track record of delivering groundbreaking technology, cybersecurity, and innovative business solutions.

Borwell

Borwell

Borwell delivers software and IT solutions to the UK MoD and to UK Government departments, which are secure by design.

TIM Enterprise

TIM Enterprise

TIM Enterprise offers innovative, sustainable and secure 360-degree digital solutions to companies and public administrations.

GO Business

GO Business

GO Business are a specialised B2B team within GO that caters to the communication needs of the local business community in Malta.

Barrier Networks

Barrier Networks

Barrier Networks are a Cyber Security Managed Service Provider that specialises in Network and Application security.

Advania UK

Advania UK

Advania are one of Microsoft’s leading partners in the UK, specialising in Azure, Security, Dynamics 365 and Microsoft 365.

DeepTempo

DeepTempo

At DeepTempo, we build AI models and related software that protect enterprises and service providers from sophisticated cyber threats.

DefectDojo

DefectDojo

DefectDojo is a DevSecOps and vulnerability management tool.