Security News > 2023 > May > How APTs target SMBs

By analyzing a year's worth of APT campaign data they collected from the 200,000+ SMBs that have their security solution deployed, they pinpointed three main trends of attacks targeting SMBs in the space of a year.

SMBs often lack adequate cybersecurity measures, making them vulnerable to all kinds of cyber threats.

APT actors exploit this weakness by targeting SMBs as a stepping stone towards achieving their larger goals.

APT actors targeting SMBs. There are three notable trends in the types of attacks and tactics used by APT actors against SMBs:. 1.

APTs gain access to an SMB's web server/domain or an email account, often by exploiting unpatched vulnerabilities or by stealing login credential.

"Regional MSPs often protect hundreds of SMBs that are local to their geography and a number of these maintain limited and often non-enterprise grade cyber security defenses. APT actors appear to have noticed this disparity between the levels of defense provided and the potential opportunities to gain access to desirable end user environments," the researchers pointed out.

News URL

https://www.helpnetsecurity.com/2023/05/31/apt-targeting-smbs/