In view of the outside Ukraine government organization network attack21%
By the ChineseIP network attacks against NATO countries surged 116%
The Check Point Research (CPR) around aimed at Russia/Ukraine the latest situation of the network attack.Three days before the war, in view of the Ukrainian government and military sectors of network attack leapt by 196%.Since then, for the Ukrainian government and military sectors of network attack, on 13 March 7 - fell by 50% within 7 days.CPR suspected hackers have turned to use other government pay close attention to the conflict.However, in view of all sectors of Ukraine and Russia (not just the government/military departments) attacks has increased since the conflict began to and record high since this year.CPR, meanwhile, also pay attention to the IP address from China last week and cyber attacks against NATO countries have increased.
- In Ukraine, CPR records show that since the conflict began against cyber attacks has increased 20% in the whole all industry;
- In Russia, CPR records show that since the conflict began against cyber attacks has increased 1% in the whole all industry;
- CPR provides information: each region observed network attacks (+ 14%), North America, Europe (+ 17%), the asia-pacific region (+ 11%), Latin America (+ 17%) and Africa (2%);
- CPR from the trend of the research before and after Russia's invasion of Ukraine, found the IP address from China cyber attacks against NATO countries increased by 116%, and in view of the world has increased by 72%.
CPR has updated the surrounding the conflict between Russia and Ukraine statistics observed network attacks.On March 7th - 13th overall network attack number of times within 7 days since conflict broke out, and the record high since this year.
- In Ukraine, each organization number under attack for 1466 times per week on average, 20% higher than prior to the start of the conflict, is 13% higher than conflict started in the first two weeks.At the same time, due to the tension, the country plunged by 27% the number of active network;
- In Russia, each organization per week on average number under attack for 1274 times, but the overall change: smaller than conflict before the start of increased by 1%, also 4% higher than conflict started in the first two weeks;
- Globally, each organization number under attack for 1266 times per week on average, 14% higher than prior to the start of the conflict, 15% higher than conflict started in the first two weeks.
Network attack (by region)
- In Europe, every organization number under attack for 1068 times per week on average, 14% higher than prior to the start of the conflict, conflict began than 15% higher than that of the first two weeks.
- In North America, each organization number under attack for 991 times per week on average, 17% higher than prior to the start of the conflict, conflict began than 15% higher than that of the first two weeks.
- In the asia-pacific region, each organization number under attack for 1718 times per week on average, 11% higher than prior to the start of the conflict, conflict than began to 13% higher than that of the first two weeks;
- In Latin America, each organization number under attack for 1837 times per week on average, 17% higher than prior to the start of the conflict, conflict began than 20% higher than that of the first two weeks.
- In Africa, every organization number under attack for 1987 times per week on average, 2% less than before the start of conflict, 1% less than the conflict began in the first two weeks.
The government/military departments focus
When focusing on the government and military sectors, CPRfoundThe first few days of the conflict within the territory of Ukraine attack increased significantly, on March 7th - 13th the country within a week compared to the number of attacks occurred, and the conflict in the first two weeks decreased (59% reduction).In all parts of the world, however, in view of the government/military attacks have increased dramatically, grew by an average of 21% compared with the prior to the start of the conflict, conflict began than 19% higher than that of the first two weeks.
Chinese IP address cyber attacks against NATO countries
In the current conflict between Russia and Ukraine, CPR found from cyber attacks has increased China's IP address.
- Last week from China and attacks on the world, every organization has suffered attacks per week on average 72% higher than prior to the start of the conflict, conflict than began to 60% higher than that of the first three weeks;
- Last week from China and attacks on NATO enterprise network, suffered attacks per week on average 116% higher than prior to the start of the conflict, conflict than began to 86% higher than that of the first three weeks;
- This increase is significantly higher than the same period the overall growth of global network attack.
CPR can't blame China entity or any known network attack China attacker, observation results show that in Ukraine conflict broke out, outside the boundaries of Chinese hackers may increasingly use IP as the source of attack in China.
Check Point data research manager Omer Dembinksy said: "in the beginning, the hacker seems to be very concerned about the conflict, but two weeks after they have understood what they can or cannot do. In other words, the hacker has returned to" normal operation ". In addition, we have seen has launched attacks on government/military targets, it could be around a part of the war diplomatic influence, such attacks also used the public attention on things and launched a phishing attack. At the same time, we also see the IP address of network attack from China increased significantly, but want to stress is that we can't take this kind of attack attribution to any entities in China, because there is no more evidence, it is difficult to determine the source, however, it is clear that hackers are using IP network attack on a global scale in China, especially the NATO countries. These IP is likely to be hackers used at home and abroad. This trend can have many meanings, for example, these gains can be showed now where setup and operation of the service easier or cheaper, or where is more suitable for the real source of the hidden attack, even can also Point to a global routing direction of the network traffic at this time. A period of time in the future, we will continue to monitor the Russia, Ukraine and other parts of the network attack."
Published the echoes