2021-2022 UK Financial Sector Cyber Threat Landscape Report

This research aims to shed light on the cyber threats targeting the UK’s financial sector which is following the trend of transporting banking and financial services online, putting itself at risk of being cyber-attacked. With the financial sector in the UK being the most likely sector to hold personal data of customers, the question of this sector’s state of cyber security is of utmost importance. In addition, the research describes threats that UK companies have faced during 2021 and early 2022 and provides information on advanced persistent threat groups (APTs) that have targeted the UK during 2021.

Wichtigste Erkenntnisse des Berichts:

• Almost 17,000 leaked credentials tied to the UK’s top financial firms in 13 months, 66% of them without passwords
• The largest sources: the RedCappi, ParkMobile and Oxfam Australia breaches, with none of the top 14 breached companies based in the UK
• Around 2,000 compromised accounts on botnet markets, including an investment bank’s secure email, ADFS single sign-on and corporate VPNs
• About 60 network accesses to UK companies for sale, such as RDP access to a fintech for USD 300, and the IAB “barf”
• 135 UK ransomware victims in 2021, hit mainly by Conti, PYSA, LockBit and REvil, plus APT groups targeting the UK