High incidence of malware and web-borne threats in Sri Lanka warns Kaspersky

Kaspersky General Manager for Southeast Asia Yeo Siang Tiong (centre) briefs the media in Colombo along with Kaspersky Head of Sales – Asia Emerging Countries Sam Yan (left) and Pre-sales Manager (Indonesia) Jemmy Handinata – Pic by Upul Abayasekara 

• 15 m local incidents on the computers of Kaspersky Security Network participants in Sri Lanka
• 46.7% of users were targeted by local threats due to the use of flash drives, camera memory cards, phones, external hard drives 
• Additionally 9.3 m different Internet-borne cyberthreats detected and 39.5% of users targeted
• Says cyber threats globally on the rise with 411,000 unique malware found daily as opposed to 200,000 six years ago
• Unveils new line of cybersecurity products that includes robust endpoint and extended protection powered by AI capabilities

Global cyber security and digital privacy specialists Kaspersky yesterday warned of a high incidence of malware and web-borne threats in Sri Lanka.

It said in 2023, Kaspersky products detected 15 million local incidents on the computers of Kaspersky Security Network participants in Sri Lanka. Overall, 46.7% of users in Sri Lanka were targeted by local threats during this period.

These statistics represent the malicious programs found directly on users’ computers or removable media connected to them (flash drives, camera memory cards, phones, external hard drives) or that initially made their way onto the computer in non-open form (for example, programs in complex installers or encrypted files).

Additionally, 9.3 million different internet-borne cyber threats were detected on the computers of KSN participants in Sri Lanka. Overall, 39.5% of users were targeted by web-borne threats during this period.

Web-based threats expose people and computer systems to online harm. This includes well-known threats such as phishing (a type of social engineering attack) and through the exploitation of vulnerabilities in browsers or infected plugins.

“We observe a high incidence of malware spread through removable media such as USB drives. These attacks exploit vulnerabilities in local systems, often bypassing initial digital defences. On the web front, the majority of attacks are conducted through browsers, leveraging drive-by download tactics that exploit browser and plugin vulnerabilities,” Kaspersky General Manager for Southeast Asia Yeo Siang Tiong told journalists in Colombo.

“Coupled with the rise in social engineering attacks, where users are deceived into downloading seemingly legitimate files, our data underscores the critical need for comprehensive cybersecurity strategies,” added Yeo who revealed that cyber threats are globally on the rise with 411,000 unique malwares found daily as opposed to 200,000 six years ago.

Kaspersky revealed alarming data at the launch of a new line of cybersecurity products that includes robust endpoint protection powered by AI capabilities.

The new product line helps companies build crucial cybersecurity functions, to provide robust protection against multiple types of threats that businesses face the most, such as ransomware, malware and data breaches, and avoid infrastructure penetration through Business Email Compromise, supply chain attacks, exploits and other vulnerabilities.

“With the introduction of Kaspersky Next, we are simplifying the complexities of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) for businesses and organisations in Sri Lanka of all sizes to effectively combat these diverse and sophisticated threats, ensuring robust protection and resilience against cyber intrusions,” said Yeo at a briefing to the media also attended by Kaspersky Head of Sales – Asia Emerging Countries Sam Yan and Pre-sales Manager (Indonesia) Jemmy Handinata.

Quoting Enterprise Strategy Group’s XDR and SOC Modernisation Report, Kaspersky said businesses are still struggling to find information security tools that can detect and investigate advanced threats on time. In the constantly evolving cyber threat landscape, it is vital for companies to have a comprehensive cyber security solution, the Company stressed.

Kaspersky said as the most advanced and effective cybersecurity solutions, EDR and XDR help companies to withstand the more prevalent, evasive, and sophisticated attacks, providing businesses with total visibility, control, rapid response and proactive threat hunting.

Kaspersky Next is deployment-agnostic and allows for both cloud and on-premise installations. Companies can manage it either through a streamlined console to perform core cybersecurity tasks quickly, or via an enterprise-grade console with more granular controls and advanced monitoring.

The new product line helps companies build crucial cybersecurity functions, to provide robust protection against multiple types of threats that businesses face the most, such as ransomware, malware and data breaches, and avoid infrastructure penetration through Business Email Compromise, supply chain attacks, exploits and other vulnerabilities.

Kaspersky Next includes multiple automation features such as cloud monitoring and blocking, vulnerability and patch management, IoC scan and playbooks that help businesses not only to support the effective detection and remediation of complex and new threats, but also to significantly reduce the burden on cybersecurity teams by minimising the number of routine cybersecurity tasks.

With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky said its deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe.