80% of Middle East cyberattacks breach confidential data

DDoS cyberattacks in the UAE surge 862%

- Somshankar Bandyopadhyay [e-mail]

One in three successful cyberattacks in the Middle East was carried out by Advanced Persistent Threat (APT) groups that commonly target government institutions and critical infrastructure, a study showed. While the rapid adoption of new IT solutions in the region boosts efficiency across industries, it also increases their exposure to cyberattacks.

A study by Positive Technologies, released on Wednesday at Gisec Global, examined the impact of digital transformation, the rise of organised cybercrime, and the dynamics of the underground market in the region.

Cybercriminals heavily relied on social engineering (61 per cent of cases) and malware (51 per cent), often combining the two methods. Remote access trojans (RATs) were the primary weapon in 27 per cent of malware-based attacks. The widespread use of RATs suggests that attackers often aimed to maintain long-term access to their victims' systems.

The analysis shows that 80 per cent of cyberattacks on organisations in the Middle East resulted in the breaches of confidential information. Hackers were mostly interested in credentials and trade secrets (29 per cent each), as well as personal data (20 per cent). In most cases, the stolen data was used for blackmail or sold on the dark web. The second major consequence of attacks (38 per cent of cases) was the disruption of core business operations. Such disruptions were particularly harmful in sectors like healthcare, transportation, and government services.

In 2024, APT groups accounted for 32 per cent of all attacks. APT groups are the most dangerous threat actors in the region because of their significant financial resources and advanced technical skills. In 2024, these groups accounted for 32 per cent of all recorded cyberattacks, with a particular focus on government institutions and critical infrastructure.