Small businesses in Saudi Arabia are still in danger, facing a 46% increase in Internet attacks in 2022
When a small business owner is faced with the responsibilities of production economics, financial reports and marketing all at the same time, cybersecurity can often appear complicated and, at times, unnecessary. However, this disregard for IT security is being exploited by cybercriminals. Kaspersky researchers assessed the dynamics of attacks on small and medium-sized businesses between January and April 2022 and the same period in 2021 to identify which threats pose an increasing danger to entrepreneurs.
In 2022, a popular attack tool used on small businesses is Internet attacks, specifically, web pages with redirects to exploits, sites containing exploits and other malicious programs, botnet C&C centers, etc. The number of these attacks also increased in the first trimester of 2022 by 46%. In comparison to 449,082 infections in 2021, Kaspersky researchers detected almost 656,045 in the first four months of 2022.
Also notable is that the number of Trojan-PSW (Password Stealing Ware) detections increased by almost half (44%) compared to the same period in 2021 一 35,005 compared to 50,348. Trojan-PSW is a malware that steals passwords, along with other account information, which then allows attackers to gain access to the corporate network and steal sensitive information.
With the shift towards remote working, many companies have introduced the Remote Desktop Protocol (RDP), a technology that enables computers on the same corporate network to be linked together and accessed remotely, even when the employees are at home. However, the number of attacks on RDP has slightly decreased and this might be the result of companies steadily welcoming employees back to the office. For example, in the first trimester of 2021 there were about 9.9 million attacks in Saudi Arabia, whereas for the same period in 2022 the number had decreased to 4.3 million.
Having a special security solution enables attack visualization and provides IT administrators with a convenient tool for incident analysis. The faster they can analyze where and how a leak occurred, the better they will be able to solve any negative consequences. The new edition of Kaspersky Endpoint Security Cloud, dubbed Kaspersky Endpoint Security Cloud Pro[1], contains advanced new capabilities, including automated response options and an extended set of security controls in a single solution. The Pro version also includes built-in training for IT workers seeking to boost their cybersecurity skills and make the most out of their specialized security products.
Even small businesses with limited IT resources still need to protect all their working devices, including computers and mobile phones, from cyberthreats. The updated Kaspersky Small Office Security[2] is a key tool for startups, small online-stores and local businesses to keep all of their work devices protected, safely transfer any valuable business-related files and avoid falling victim to ransomware.
To protect your business, Kaspersky recommends:
- Providing your staff with basic cybersecurity hygiene training as many targeted attacks start with phishing or other social engineering techniques.
- Using a protection solution for endpoints and mail servers with anti-phishing capabilities to decrease the chance of infection through phishing emails.
- Taking key data protection measures. Always safeguard corporate data and devices, including by using password protection, encrypting work devices and ensuring data is backed up.
- Keeping work devices physically safe – do not leave them unattended in public, always lock them and use strong passwords and encryption software.
