The financial services sector is one of the most targeted, with 136 of 255+ tracked adversaries focusing on it. In 2024, intrusion frequency increased 25%, targeted intrusion activity surged 109%, and North Korean cyber theft doubled. Adversaries exploit credentials, use hands-on-keyboard attacks, and apply cross-domain tradecraft for persistence and data theft. Key groups include SCATTERED SPIDER, which uses social engineering to compromise IT accounts; BITWISE SPIDER, behind LockBit ransomware and StealBIT via brute-forcing and supply chain compromises; and GRACEFUL SPIDER, which operates Clop ransomware and exploits zero-days in file transfer apps to steal data.

Join for free to read