Cybercriminals continue to steal passwords from Southeast Asian businesses

Kaspersky has announced that, through its B2B products, it prevented tens of millions of brute-force attacks targeting businesses in Southeast Asia in 2023.

Specifically, from January 2023 to December 2023, Kaspersky's B2B products, installed in companies of all sizes in Southeast Asia, detected and blocked 61,374,948 such attacks.

Bruteforce attack is a form of guessing a password or encryption key by systematically trying all possible combinations of characters until the correct combination is found. If successful, the attacker can steal the user's login information.

Remote Desktop Protocol (RDP) is a proprietary Microsoft protocol that provides a graphical interface for users to connect to another computer over a network. RDP is widely used by both system administrators and ordinary users to remotely control servers and other PCs.

Cybercriminals use brute-force attacks to find valid usernames/passwords by trying all possible character combinations until they find the correct password to access the system.

Kaspersky blocked over 61 million brute-force attacks targeting businesses in 2023.

Vietnam, Indonesia, and Thailand recorded the highest number of brute-force attacks in Southeast Asia last year. Meanwhile, Singapore recorded over 6 million cases, the Philippines nearly 5 million, and Malaysia had the lowest number of brute-force attacks with almost 3 million.

According to Adrian Hia, Managing Director for Asia Pacific at Kaspersky, brute-force attacks are a potential threat that businesses cannot ignore.

The use of third-party services for data exchange, employees working on personal computers, and Wi-Fi networks pose risks. Remote access tools like RDP remain a constant concern for corporate cybersecurity teams.

If users are using RDP for work, please ensure you take all of the following precautions:

• Prioritize using strong passwords.
• Restrict RDP access over enterprise VPN.
• Enable Network Level Authentication (NLA).
• Enable two-factor authentication (if available).
• Disable RDP and close port 3389 if not in use.
• Use a reputable security solution like Kaspersky Endpoint Security for Business.

Source: https://nld.com.vn/viet-nam-thuoc-3-nuoc-bi-danh-cap-mat-khau-nhieu-nhat-dong-nam-a-196240516175411054.htm