Large networks and systems within organizations are becoming more efficient with cybersecurity. And hackers are trying to adapt and rebuild their tools.
As organizations increasingly patch their systems, including popular services like Citrix and Microsoft Exchange, the reliance on zero-day flaws is expected to decrease.
Vikram Thakur, Technical Director at Symantec, notes that unless new vulnerabilities emerge, the trend may revert to hackers relying on botnets for ransomware attacks.
Targeting Botnets
Historically, ransomware attacks leveraged botnets found within networks of malware-infected computers. But law enforcement efforts in 2023 have targeted and dismantled some of the most prolific botnets, forcing hackers to adapt and develop backup plans.
Hackers have demonstrated increased adaptability, exploring alternative avenues such as the darknet market, which was previously the domain of nation-state hackers.
The report highlights the motivation for hackers to find vulnerabilities in public-facing infrastructure used by organizations, leading to more zero-days being disclosed in critical software.