Surge in Cyberattacks Spotlights Detection Difficulties

The Rise of Manual Cyberattacks: A Growing Threat in 2025

As we approach 2025, businesses and individuals alike are facing an alarming surge in manual cyberattacks, despite the advancements in AI-driven cybersecurity measures. According to a recent report by CRN, these hands-on-keyboard attacks are becoming increasingly prevalent among cybercriminals, who are drawn to their effectiveness and stealth. Adam Meyers, Senior Vice President of Counter-Adversary Operations at CrowdStrike, emphasizes that these manual attacks pose a significant challenge for traditional security tools, making them a key focus for cybersecurity strategies.

Understanding Manual Cyberattacks

Manual cyberattacks involve direct interaction with compromised systems, rather than relying solely on automated malware or exploit-based methods. This approach allows hackers to bypass many of the safeguards that standard security tools employ, as they often operate based on behavioral patterns rather than malicious software signatures. Key points about manual attacks include:

• Utilization of Common Tools: Attackers frequently use widely available tools like Microsoft Edge, PowerShell, Python, and Bash shells to navigate compromised systems.
• Difficult Detection: Because these attacks do not rely on typical malware, detecting them is significantly more complex.

The Threat Landscape: Cross-Domain Attack Strategies

The risk significantly escalates when manual cyberattacks are combined with cross-domain strategies. Groups like Scattered Spider, infamous for their high-profile breaches of MGM and Caesars Entertainment in 2023, exemplify this trend. Their tactics often include:

• Phishing for Credentials: Utilizing deceptive emails or messages to trick individuals into revealing sensitive information.
• Compromising Cloud Environments: Gaining unauthorized access to cloud-based services and data.
• Establishing Persistence: Creating new user accounts to maintain access to compromised systems.

Meyers warns that organizations focusing solely on individual attack vectors—such as endpoint security—may overlook critical threats stemming from identity and cloud activities. "If you’re only looking at one of those things, you’re not going to see the identity or the cloud activity," he states. "And that means that you’re missing an opportunity to stop that threat actor from becoming successful.”

Strengthening Cybersecurity Measures

To combat the rise of manual attacks, organizations should adopt a more holistic approach to cybersecurity. Consider these strategies:

• Implement Comprehensive Monitoring: Employ tools that monitor user behavior across all domains: endpoints, identity, and cloud environments.
• Enhance Employee Training: Regularly educate staff on the dangers of phishing and other social engineering tactics.
• Invest in Advanced Threat Detection: Utilize solutions that can analyze and detect unusual behavioral patterns indicative of manual attacks.

For more information on cybersecurity best practices and the evolving threat landscape, check out resources from Cybersecurity & Infrastructure Security Agency (CISA) and CrowdStrike.

Conclusion: Stay Informed and Prepared

As manual cyberattacks continue to grow in sophistication and frequency, it is crucial for organizations to stay informed and adapt their cybersecurity strategies accordingly. By understanding the tactics employed by cybercriminals and implementing robust security measures, businesses can better protect themselves from these emerging threats.

We invite you to share your thoughts on this topic or explore more related articles on cybersecurity trends and best practices. Stay vigilant and proactive in safeguarding your digital assets!