Kaspersky reports 24 million on-device threats in SE Asia

According to Kaspersky, businesses across Southeast Asia experienced over 24 million on-device threats in the first half of 2024.

Kaspersky reported that Vietnam and Indonesia were the most affected countries in the region, with 10,531,086 and 7,954,823 incidents, respectively. Thailand and Malaysia also faced significant threats, registering 2,650,007 and 1,965,270 threats, respectively. Singapore had the lowest incidence, with 501,148 threats, while the Philippines recorded 687,567 cases.

The on-device threats described by Kaspersky typically involve malware spread via removable media like USB drives, CDs, and DVDs or through files that arrive on computers in non-open forms, such as those in complex installers or encrypted files.

The statistics provided are based on scans conducted by Kaspersky Security Solutions, which show when files are created or accessed on hard drives and when removable storage devices are scanned.

Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky, stated, "The increasing digitisation of financial systems, e-commerce, and other industries has increased the number of internet users and expanded the attack surface for cybercriminals. In addition to that, the lack of awareness of best practices and varying level of security protection also contributed to businesses facing high number of threats and attacks."

Yeo continued, "Protection against attacks coming from removable devices or non-open form files requires robust security solutions capable of treating infected objects and further enhanced with a firewall, anti-rootkit functionality and control over removable devices. Perform regular computer scan for viruses and malware to prevent spread."

Kaspersky advises organisations to take several measures to bolster their protection against these threats. Key recommendations include keeping software updated to prevent the exploitation of vulnerabilities and backing up data regularly for quick access in emergencies.

Additional suggestions involve avoiding pirated software, assessing supply chains for potential vulnerabilities, and closely monitoring network access to detect unusual activity. Establishing a Security Operations Centre (SOC) using tools like Kaspersky Unified Monitoring and Analysis Platform and utilising threat intelligence data are recommended.

To enhance employee cybersecurity awareness, Kaspersky advises using tools such as the Kaspersky Automated Security Awareness Platform, ensuring staff are educated on the risks and protection methods against cybersecurity threats.

For businesses lacking specialised IT security staff, the company suggests subscribing to managed services like Kaspersky MDR to enhance security capabilities while developing in-house expertise.

For very small businesses, Kaspersky offers solutions like Kaspersky Small Office Security, which manages cybersecurity needs without a dedicated IT administrator and provides straightforward 'install and forget' protection.