2 min

According to Kaspersky Lab, many companies only notice that a cyber attack takes place when it is already too late. The companies only ask for help when money or data has already been stolen, or when devices have broken down.

Kaspersky Lab states that in a new report, IT Pro writes. Half of the incident response requests received by the security company last year came when it was already too late. The other 44 percent of the attacks were processed after the attack was detected, but before it could cause serious damage.

A quarter of the incident response cases handled by the company began after a company detected malicious activity on the network. Another quarter started after a company found a virus or other form of malware.

Wrong assessment

However, not everyone was able to assess the situation properly after the finds, according to Kaspersky. These misjudgments then resulted in malicious activity that developed into a serious cyber attack with real consequences.

The sooner an organization recognizes an attack, the smaller the consequences will be. But in our experience, companies often don’t pay enough attention to evidence of serious attacks, and our incident response team is often only called when it’s too late to prevent damage, said Ayman Shaaban, security expert at Kaspersky.

On the other hand, we see that many companies have learned how to assess the signals of a serious cyber attack in their network and we were able to prevent potentially much more serious incidents. We call on other organisations to consider this as a successful case study.

Doubles destructive malware attacks

As recently as August this year, IBM reported that the number of destructive malware attacks had doubled in the first half of 2019 compared to the second half of 2018. Especially ransomware in combination with wiper elements is more common: a growth of 116 percent was seen here.

On average, destructive attacks on multinational companies cost 239 million U.S. dollars. This is despite the fact that a data breach costs companies an average of 3.92 million dollars.