Manufacturing was the top industry targeted by ransomware last year

Global supply chains are bearing the brunt of ransomware attacks, according to a new report that finds manufacturing was the most targeted industry during 2021.

Knocking financial services and insurance off the top of the heap after a long reign, the manufacturing industry was found by IBM to be the most attacked sector – accounting for 23% of reports of ransomware.

That’s one of the headlines from IBM’s X-Force Threat Intelligence Index, which claims that more ransomware attacks were experienced by manufacturers than any other industry, and that the “ripple effect” of disruption caused their “downstream supply chains to pressure them into paying the ransom.”

“Manufacturers have a low tolerance for downtime, and ransomware actors are capitalizing on operational stressors exacerbated by the pandemic,” claimed the report.

In addition, a compromised organisation might find its supply chain meddled with by a hacking gang that uses it to push out poisoned software updates to customers. Clearly when it’s not just one company that has been hit by ransomware, but hundreds of its customers as well, there is even more pressure applied to pay a ransom.

Worryingly, the report found that 47% of attacks on the manufacturing industry relied upon vulnerabilities that organisations had either failed to patch or could not patch, suggesting a weakness in prioritising vulnerability management.

According to the report, there has been a 33% rise in the number of incidents caused by vulnerability exploitation, and four out of the top five vulnerabilities exploited in 2021 were new vulnerabilities, including – in second place – the Log4j vulnerability, which was only disclosed in December.

The top infection of all, however, is one that everybody should be familiar with – phishing.

Phishing may not be a new phenomenon, or technically sophisticated, but it has proven time and time again over the years to be an effective means of infecting organisations.

The X-Force team says that phishing was spotted in 41% of the incidents it remediated, with many attacks using social engineering techniques to dupe unsuspecting users into making poor decisions. In particular, phishing is often used by ransomware gangs as a means of gaining initial access to a corporate victim’s network.

A cyberattack on any organisation can cause significant problems, but a successful ransomware attack on a manufacturer which relies upon a trustworthy supply chain to provide services and goods to others can create utter havoc.

All organisations would be wise to harden their defences and ensure that proper measures are in place to reduce the chances of a breach by cybercriminals, before it’s too late.

Editor’s Note: The opinions expressed in this guest author article are solely those of the contributor, and do not necessarily reflect those of Tripwire, Inc.