Story image

WatchGuard’s eight (terrifying) 2019 security predictions

16 Nov 18

WatchGuard Technologies has issued a series of information security industry predictions for 2019.

They include the emergence of ‘vaporworms’, a new breed of file-less malware with wormlike properties that allow it to self-propagate through vulnerable systems, a takedown of the internet itself and ransomware targeting utilities and industrial control systems.

WatchGuard’s Threat Lab research team developed these predictions based on an analysis of major security and threat trends over the past year.

“Cybercriminals are continuing to reshape the threat landscape as they update their tactics and escalate their attacks against businesses, governments, and even the infrastructure of the internet itself,” says WatchGuard Technologies chief technology officer Corey Nachreiner.

“The Threat Lab’s 2019 predictions span from highly likely to audacious, but consistent across all eight is that there’s hope for preventing them. Organisations of all sizes need to look ahead at what new threats might be around the corner, prepare for evolving attacks and ensure they’re equipped with layered security defences to meet them head-on.”

The WatchGuard Threat Lab’s 2019 Security Predictions are:

1. ‘Vaporworms’ or file-less malware worms will emerge

Fileless malware strains will exhibit wormlike properties in 2019, allowing them to self-propagate by exploiting software vulnerabilities.

Fileless malware is more difficult for traditional endpoint detection to identify and block because it runs entirely in memory, without ever dropping a file onto the infected system.

Combine that trend with the number of systems running unpatched software vulnerable to certain exploits, and 2019 will be the year of the vaporworm.

2. Attackers hold the internet hostage

A hacktivist collective or nation-state will launch a coordinated attack against the infrastructure of the internet in 2019.

The protocol that controls the internet (BGP) operates largely on the honour system, and a 2016 DDoS attack against hosting provider Dyn showed that a single attack against a hosting provider or registrar could take down major websites.

The bottom line - the internet itself is ripe for the taking by someone with the resources to DDoS multiple critical points underpinning the internet or abuse the underlying protocols themselves.

3. Escalations in state-level cyber attacks force a UN cybersecurity treaty

The UN will more forcefully tackle the issue of state-sponsored cyber attacks by enacting a multinational Cyber Security Treaty in 2019.

4. AI-driven chatbots go rogue

In 2019, cybercriminals and black hat hackers will create malicious chatbots on legitimate sites to socially engineer unknowing victims into clicking malicious links, downloading files containing malware, or sharing private information.

5. A major biometric hack will be the beginning of the end for single-factor authentication

As biometric logins like Apple’s FaceID become more common, hackers will take advantage of the false sense of security they encourage and crack a biometric-only login method at scale to pull off a major attack.

As a result, 2019 will see strong growth in the use of multi-factor authentication (MFA) for added protection among groups with more security knowledge, particularly push-based authentication and MFA for Cloud application defence.

6. A nation-state to take ‘fire sale’ attacks from fiction to reality

In the Die Hard movie series, a ‘fire sale’ was a fictional three-pronged cyber-attack, targeting a city or state’s transportation operations, financial systems, public utilities and communication infrastructure.

The fear and confusion caused during this attack was designed to allow the terrorists to syphon off huge sums of money undetected.

Modern cybersecurity incidents suggest that nation-states and terrorists have developed these capabilities, so 2019 may be the first year one of these multi-pronged attacks is launched to cover up a hidden operation.

7. Hackers to cause real-world blackouts as targeted ransomware focuses on utilities and industrial control systems

Targeted ransomware campaigns will cause chaos in 2019 by targeting industrial control systems and public utilities for larger payoffs.

The average payment demand will increase by over 6500%, from an average of $300 to $20,000 per attack.

These assaults will result in real-world consequences like city-wide blackouts and the loss of access to public utilities.

8. A WPA3 Wi-Fi network will be hacked using one of the six Wi-Fi threat categories

Hackers will use rogue APs, Evil Twin APs, or any of the six known Wi-Fi threat categories (as defined by the Trusted Wireless Environment Framework) to compromise a WPA3 Wi-Fi network in 2019, despite enhancements to the new WPA3 encryption standard.

Unless more comprehensive security is built into the Wi-Fi infrastructure across the entire industry, users can be fooled into feeling safe with WPA3 while still being susceptible to attacks like Evil Twin APs.

Is Supermicro innocent? 3rd party test finds no malicious hardware
One of the larger scandals within IT circles took place this year with Bloomberg firing shots at Supermicro - now Supermicro is firing back.
IDC: Smartphone shipments ready to stabilise in 2019
IDC expects year-over-year shipment growth of 2.6% in 2019, while the world's largest market is still forecast to be down 8.8% in 2018.
Microsoft NZ bids Goldie a “fond farewell”
Microsoft New Zealand director of commercial and partner business takes new role across the Tasman. The search for his replacement has begun.
Object-based storage over-looked by Aussies, survey shows
Hitachi Vantara has sponsored an IDC survey looking at the technology’s usage and adoption barriers across Asia Pacific.
One Identity a Visionary in Magic Quad for PAM
One Identity was recognised in the Gartner Magic Quadrant for Privileged Access Management for completeness of vision and ability to execute.
Accenture 'largest Oracle Cloud integrator in A/NZ'
Accenture has bought out Oracle Software-as-a-Service provider PrimeQ, which now makes Accenture the largest Oracle Cloud systems integrator in Australia and New Zealand.
How to keep network infrastructure secure and available
Two OVH executives have weighed in on how network infrastructure and the challenges in that space will be evolving in the coming year.
White box losing out to brands in 100 GE switching market
H3C, Cisco and Huawei have all gained share in the growing competition in the data centre switching market.