How prepared are organizations for a surge in DNS threats over the holiday period?
- Published: Thursday, 10 December 2020 09:02
Neustar, Inc., has released a new report from the Neustar International Security Council (NISC) which explores the rise in DNS security threats over the peak retail period. With more people shopping online than ever before amid the pandemic, 78 percent of cyber security professionals said they expect to see an increase in DNS-related security threats over the next month. To prepare their organizations for this upcoming surge, three in five (59 percent) have altered their DNS security methods in the run up to the holiday season.
Despite these preparations, however, over a quarter (29 percent)admitted to having reservations around their ability to respond to DNS attacks, which can be largely attributed to the shifting and complex DNS threat landscape.
Out of the range of DNS threats that exist today, the cyber security community ranked domain hijacking (41 percent) as their top concern and the attack they are most likely to fall victim to, followed by DNS spoofing/cache poisoning (28 percent), DNS tunneling (16 percent) and zombie domain attacks (15 percent). Three in five respondents said that their organization had been hit by one of these threats in the past year.
“Acting as the Internet’s address book and backbone of today’s digital services, it’s unsurprising that DNS is an increasingly appealing vector for malicious actors, particularly as more consumers turn to websites during peak online shopping periods,” said Rodney Joffe, Chairman of NISC, SVP and Fellow, Neustar. “When successful, DNS attacks can have damaging repercussions to an organization’s online presence, brand and reputation. A domain hijacking attack, for example, can result in hackers taking control of a company’s domain and using it to host malware or launch phishing campaigns that evade spam filters and other reputational protections. In a worst-case scenario, this type of attack can even lead to an organization losing its domain altogether.”
“While organizations are aware of the severity of DNS attacks, it’s important that they continue to take proactive steps to protect themselves and their customers against the different threats,” Joffe continued. “This should involve regular DNS audits and constant monitoring to ensure a thorough understanding of all DNS traffic and activity. Crucially, DNS data can also provide organizations with timely, actionable and important threat insights, allowing them to not only protect against DNS-related threats, but also mitigate the vast majority of malware, viruses and suspicious content before critical systems are infiltrated.”
Findings from the latest NISC research highlighted a 13.6-point year-on-year increase in the International Cyber Benchmarks Index. Calculated based on the changing level of threats and impact of cyber attacks, the index has maintained an upward trend since May 2017.
During September and October 2020, DDoS (22 percent) was ranked as the greatest concern for security professionals, followed by system compromise (19 percent) and ransomware (17 percent). During this period, organizations have focused most on increasing their ability to respond to vendor or customer impersonation (58 percent), targeted hacking (54 percent), IP address hacking (52 percent).
The International Cyber Benchmarks Index is based on a bimonthly online survey of security professionals, conducted by Harris Interactive on behalf of NISC. Participants in the November 2020 survey comprise 302 professionals from across 6 EMEA and US markets. All are in senior positions within their organizations and able to provide informed opinions about cyber security issues, including how these are impacting their enterprise and the wider business community.