The document discusses next-generation cyber threats and how to tackle them. It outlines common attack types like ransomware, IoT vulnerabilities, and phishing. Newer threats are more targeted, stealthy and personalized using zero-day exploits. Critical infrastructure, high-risk industries, and others are targeted. New attack methods include ransom denial-of-service and destruction of service. Hackers offer attacks-as-a-service on the dark web. To tackle new threats, a holistic approach is needed involving training, prevention, updates, and cyber resilience planning through public-private cooperation.

1. www.cloudsec.com | #CLOUDSEC
Understanding and tackling
“next-tier” cyber threats
Charles Mok
Legislative Councillor (Information Technology)
@charlesmok

2. What happened in 2017?
Ransomware: Top threat
2

3. IoT
vulnerabilities
Email
phishing
Social
engineering
IoT for DDoS
attack
Common types of attacks

4. More vulnerabilities exposed:
and not just on PCs
Spyware, malware
keeps appearing
in app stores
Stealing
credentials

5. Targeted
Stealthy
Personalized
Zero-day
The New Threat Landscape

6. #CLOUDSEC
TARGETED
• Critical infrastructure: electric power systems,
transport infrastructure, supply chain
• High risk industries: healthcare providers, finance
• Others: government, higher education, retail,
travel/hospitality, technology, entertainment

7. Newer attack methods emerging
Ransom denial-of-service (RDoS)
Destruction of service (DeOS)
destroying organisations data and back-up
Automation: reused malware + automation
by bots to attack new exploits and flaws
Sophisticated phishing

8. #CLOUDSEC
Hackers for hire:
Attacks-as-a-service
• DDoS-as-a-service
• ransomware-as-a-
service
• Fraud-as-a-service

9. hacker ecosystem:
spreading tools in the dark web
even paid subscription

10. How to tackle
new cybercrime scenarios?
10

11. Strengthening defence against newer threats
require holistic approach
Training of
in-house
personnel
Proactive
prevention
and
detection
Regularly
patch and
update
systems
cyber
resilience
plan for
recovery
Trend: Promote cooperation between public and private
sector with legislation to protect digital assets

12. www.cloudsec.com | #CLOUDSEC
THANK YOU
Charles Mok
Legislative Councillor (Information Technology)
@charlesmok