Adding further complexity, adversaries are similarly “going digital”; online criminality is experiencing its own digital transformation revolution manifested largely by:
• The speed at which compromise methods and attacker behaviours are distributed as tools.
• The evolution of the criminal eco-system which is migrating away from the older online forum models towards more distributed, private channels.
• The availability of tools and services that lower the skills bar for the attackers to effectively carry out attacks.
• The almost entrepreneurial nature of organised online crime which aims to scale the threat to maximise profits.
• The innovative trust models that continually evolve, creating ‘trust among thieves’ that enable the fencing of stolen information, or the anonymised payment of ransoms.
• The innovative methods for disrupting the identity of organisations and their critical services.