CERT Report March 2024

CERT Report March 2024

01. Monthly Attack TrendsThrough Statistics

 

Attack Type Statistics

 

Attack type statistics lets you access statistical information on the top nine attack types that occurred in the previous month, including the progression of each attack in terms of increase and decrease, as well as attack progression by industry sector and country.

 

Monthly Attack Type Statistics

 

According to the attack type statistics compiled for February, the overall discovery count was 363,956 cases, representing an increase of 83,054 cases compared to the previous month. The most frequently attempted Collect and Analyze Information attacks totaled 168,715 cases—a decrease of 17,225 cases compared to the previous month—accounting for 46.4% of all attack types in February. Inject Unexpected Items attacks ranked 2nd with 131,547 cases followed by Manipulate Data Structures (3rd) with 29,242 cases, Subvert Access Control (4th) with 27,606 cases, and Manipulate System Resources (5th) with 4,932 cases, with Engage in Deceptive Interactions ranking 8th with 3 cases and Manipulate Timing State ranking 9th with 0 cases, all the same as previous month. Employ Probabilistic Techniques attacks rose by one notch to 6th place with 1,356 cases. On the other hand, Abuse Existing Functionality attacks dropped by one notch to 7th place with 555 cases.

 

 

 


Figure 1. Ratio of attack types in February
 

 


Figure 2. Percentage of attack types over the last 12 months

 

Rank Attack Type Fluctuation January February

12 Months

Percentage

Count Ratio Count Ratio
1 Collect and Analyze Information 185,940 41.6% 168,715 46.4% 52.8%
2 Inject Unexpected Items 165,834 37.1% 131,547 36.1% 29.6%
3 Manipulate Data Structures 46,627 10.4% 29,242 8.0% 7.6%
4 Subvert Access Control 40,616 9.1% 27,606 7.6% 7.2%
5 Manipulate System Resources 4,583 1.0% 4,932 1.4% 0.9%
6 Abuse Existing Functionality ▲1 1,258 0.3% 1,356 0.4% 0.4%
7 Employ Probabilistic Techniques ▼1 2,140 0.5% 555 0.2% 1.4%
8 Engage in Deceptive Interactions 12 0.0% 3 0.0% 0.0%
9 Manipulate Timing State 0 0.0% 0 0.0% 0.0%
Total 447,010 100% 363,956 100% 100%

 Table 1. Statistics by attack types in February

 

※ Analyzed events are classified into 10 attack types based on attack patterns

※ The total ratio is calculated by rounding

 

The recent trend of attack types over the last 3 months is as follows.
 


 Figure 3. Trend over the last 3 months by attack types

  

IP

104[.]234[.]204[.]32
119[.]203[.]143[.]121
121[.]135[.]178[.]32
124[.]239[.]150[.]227
150[.]109[.]234[.]88