A Look Ahead To 2022:
Predictions Around the Top Cyber Threats to Enterprises

McAfee Enterprise and FireEye released its 2022 Threat Predictions, examining the top cybersecurity threats they predict enterprises will face in 2022.

#1 Lazarus Wants To Add You as a Friend

  • Nation States will weaponize social media to target more enterprise professionals
  • Successful approach will become more common
  • Vector growth and infiltration through espionage groups

#2 Help Wanted: Bad Guys With Benefits

  • Nation states will increase their offensive operations by leveraging cybercriminals
  • Hackers will be hired to write code and conduct
  • Start-up company and front companies controlled by nation state intelligence orgs

#3 Game of Ransomware Thrones

  • Self-reliant cybercrime groups will shift the balance of power with RaaS eco-kingdom
  • Matter of time before some individuals believe they aren’t getting their fair share
  • Power shift from those who control the ransomware to those who control victims’ networks

#4 Ransomware For Dummies

  • Less-skilled operators won’t have to bend the knee in RaaS model power shift
  • Potential migration back to early days of ransomware
  • Decreased dependency on technical expertise of affiliates

#5 Keep a Close Eye on API

  • 5G and IoT traffic between API services and apps will make them increasingly lucrative targets
  • Evolution of malware attacks to use more cloud APIs
  • Misuse of APIs to launch attacks on enterprise data

#6 Hijackers Will Target Your Application Containers

  • Expanded exploitation of containers will lead to endpoint resource takeovers
  • Increasing attacks on orchestration layer
  • Increased image, registry and container risks targeting vulnerable applications

#7 Zero Care About Zero Days

  • Time to repurpose vulnerabilities into working exploits will be measured in hours
  • Enterprises should revisit their asset and patch management
  • Renewed focus on reducing “time to patch”