However, it is important to note that cryptomining is inherently chattier than these other attacks, so its strong lead over these other top attacks is not as pronounced as it appears in terms of DNS query volume. We saw more cryptomining in 2019 than in 2020, but the reduction in crypto query volume in 2020 wasn’t enough to drop cryptomining from the #1 spot. Looking at the top attacks we’ve seen so far in 2020, it’s not surprising that cryptomining takes the top spot. Cryptomining was also the #1 attack last year by query volume. Top attacks impacting Umbrella customers: One of the reasons for the shift this year was due to the COVID-19 pandemic and the huge increase in malicious phishing sites preying on peoples’ fears around the virus. Last year, trojans were the second most active at 59% and phishing was in the fourth spot at 46% impacted. Looking at our entire customer base in the first half of 2020: 91% of them saw a domain linked to malware, 83% of them saw a domain linked to phishing, 67% of them saw a domain linked to cryptomining, and 60% of them saw a domain linked to trojans. Phishing moved into second place behind malware in the first half of 2020

Cisco believes it’s better to predict and prevent cyberattacks. Each node of attack infrastructure is an opportunity to identify and neutralize before it can be used for new attacks. This analysis is based on aggregated DNS query logs paired with scrubbed and anonymized customer demographic information.Ĭisco Umbrella protects against more than 7 million malicious domains and IPs, while discovering over 60,000 new malicious destinations (domains, IPs, and URLs) on a daily basis. loads of phishing tactics with COVID-19 related themes (which comes as no surprise – learn more about this in our earlier blog post).īefore we dig into the data, it’s helpful to remind ourselves how the Cisco global network views the threat landscape. Our 32+ customer facing data centers process 220+ billion domain naming service (DNS) requests daily. This gives us a unique perspective on global DNS traffic.a rise in threats to managed service providers (MSPs).an increase in obfuscation and the use of macros and other fileless* malware to evade traditional antivirus (A/V) defenses.an evolution in repurposing trojans and droppers for new forms of malware delivery.Key Highlights In the first half of 2020, Cisco Umbrella identified the following threat trends: Their tactics and targets may be shifting and changing, but the threats are not going away. But the reality is that cyberattackers aren’t sleeping. With economies on lifelines and work being done by teleconference calls, it may seem sometimes like the whole world is on hiatus.

Cisco umbrella market research