CERT Report February 2024

CERT Report February 2024

01. Monthly Attack Trends Through Statistics

 

Attack Type Statistics

 

In the attack type statistics, you can access statistical information on the top nine attack types that occurred in the previous month, including the progression of each attack in terms of increase and decrease, as well as the attack progression by industry sector and by country.

 

Monthly Attack Type Statistics

 

According to the attack type statistics compiled for January, the overall detection count reached 447,010 cases, representing an increase of 89,651 compared to the previous month. 

Collect and Analyze Information are the most frequent attacks, totaling 185,940 cases, up by 39,759 cases compared to the previous month and 41.6% of all attack types in January. 

Inject Unexpected Items attacks ranked 2nd with 165,834 cases, Manipulate Data Structures 3rd with 46,627 cases, Subvert Access Control 4th with 40,616 cases, Manipulate System Resources 5th with 4583 cases, Abuse Existing Functionality 6th with 2140 cases, Employ Probabilistic Techniques 7th with 1258 cases, Engage in Deceptive Interactions 8th with 12 cases, and Manipulate Timing State 9th with 0 cases, all maintaining the same rankings as the previous month.

 


Figure 1. Ratio of attack types in October

 


Figure 2. Percentage of attack types over the last 12 months

 

Rank Attack Type Fluctuation December January

12-Month

Percentage

Count Ratio Count Ratio
1 Collect and Analyze Information 146,181 40.9% 185,940 41.6% 53.2%
2 Inject Unexpected Items 131,456 36.8% 165,834 37.1% 29.5%
3 Manipulate Data Structures 43,214 12.1% 46,627 10.4% 7.4%
4 Subvert Access Control 29,573 8.3% 40,616 9.1% 7.0%
5 Manipulate System Resources 3,496 1.0% 4,583 1.0% 0.8%
6 Abuse Existing Functionality 2,374 0.7% 2,140 0.5% 1.5%
7 Employ Probabilistic Techniques 1,061 0.3% 1,258 0.3% 0.4%
8 Engage in Deceptive Interactions 4 0.0% 12 0.0% 0.0%
9 Manipulate Timing State 0 0.0% 0 0.0% 0.0%
Total 357,359 100% 447,010 100% 100%

Table 1. Attack type statistics in October
 

  • Analyzed events are classified into 10 attack types based on attack patterns
  • The total ratio is calculated by rounding

 

The recent trend of attack types over the last 3 months is as follows.


Figure 3. Progression of attack types in the past 3 months
 
 

IP

101[.]91[.]210[.]137
103[.]121[.]39[.]54
104[.]243[.]38[.]24
104[.]243[.]40[.]75
115[.]227[.]19[.]195