Newsletter Archives
-
If an advanced government-sponsored hacking team is out to get you, kiss your keester goodbye
Security research firm Crowdstrike just published a report that should bring a chill to the heart of anyone working in security for a large firm or organization. They found that the “breakout time” — the amount of time from first penetration of a network to completely taking it over — varies depending on the source of the attack. If you’re up against an attack from one of the advanced Russian APT groups you have, on average, under 20 minutes to discover the intrusion and plug it.
Twenty minutes.
It is quite remarkable to see that Russia-based threat actors are almost 8 times as fast as their speediest competitor — North Korea-based adversaries, who themselves are almost twice as fast as intrusion groups from China.
So if you’re getting attacked by a Chinese APT group, on average, you have five hours to knock them out.
You have to sign up in order to get the report, but it makes very interesting reading. The graphics alone are worth the price of admission.
(Bear = Russia, Chollima = North Korea, Panda = China, Kitten = Iran, Spider = ecrime groups)