Arts, Entertainment and Recreation

Wake up in a good mood and start hacking

While hackers were once described as being “like an artist,” organizations in this industry that have been on the receiving end of some of these artistic endeavors might have a slightly different opinion. Although creativity and novelty are the hallmarks of this industry, the majority of the breaches in this sector may suffer from artistic criticisms such as “derivative” or “this has been done before” given that the top breach patterns are Web Applications, Miscellaneous Errors and  Everything Else (Figure 57). 

Fraudulent Forgers Fool Frequently.

Much like how the authenticity of art can be difficult to establish, humans also struggle with determining the legitimacy of electronic communications.  This accounts for the prevelance of the Everything Else pattern, where social engineering takes the wheel. In 2019, a Social action was found in approximately 18% of breaches. But to return to the topic of human nature, accidents and errors such as Misconfigurations and Misdeliveries remain a common issue for this sector. The growth in accidental breaches can been seen in Figure 58, where there has been a converging of Internal and External actors over the last few years.  While this rise could be due to changes in breach reporting, it has remained consistent since 2016.

Untitled Work II 

Companies want to be able to maintain their data’s integrity, and cyber criminals know that. This year the top Malware varieties (Figure 59) included functionality such as ‘Capture app data’.  This and the others listed allow bad actors to steal quietly into your systems and siphon your data, while leaving worms to spread across your environment and ransomware to lock away your key data.  These are either introduced on web servers via a vulnerability, or on desktops through the tried and true method of email phishing. 
 

The DDoS-er

One very interesting result from our research this year was that this industry experienced the highest rate of DDoS attacks (Figure 60), beating out even the Information sector – our usual winner - by a wide margin. This NAICS code contains the online gambling industry as a member, and they are likely the ones driving this trend. Apparently, DDoSing your business rival is a thing in that realm.  Who knew?