Adding further complexity, adversaries are similarly “going digital”; online criminality is experiencing its own digital transformation revolution manifested largely by:
• The speed at which compromise methods and attacker behaviours are distributed as tools.
• The evolution of the criminal eco-system which is migrating away from the older online forum models towards more distributed, private channels.
• The availability of tools and services that lower the skills bar for the attackers to effectively carry out attacks.
• The almost entrepreneurial nature of organised online crime which aims to scale the threat to maximise profits.
• The innovative trust models that continually evolve, creating ‘trust among thieves’ that enable the fencing of stolen information, or the anonymised payment of ransoms.
• The innovative methods for disrupting the identity of organisations and their critical services.
As such, there can be no digital transformation without cybersecurity. Cybercrime, digital espionage, and hacktivism have become serious risks to businesses and consumers.