According to Kaspersky Security Bulletin (KSB) report, from January to December 2024, Kaspersky detected 8,696,292 different Internet-borne cyberthreats in Sri Lanka. This translate into 8.6 million of users in the country being attacked by web-borne threats during this period. Sri Lanka ranked 22nd globally in terms of web-based threat exposure for 2024.
Web-based threats, or online threats, are a category of cybersecurity risks that exploit end-user vulnerabilities, web service weaknesses, or software flaws. They can cause significant harm to both individuals and businesses.
The methods of attack in Sri Lanka described in the KSB report for 2024 include firstly Exploiting Browser Vulnerabilities (Drive-By Download) which occurs when a user visits an infected website, unknowingly allowing malware to execute on their system. Among these threats, file-less malware is particularly dangerous, as it leverages system components such as the registry or WMI subscriptions for persistence, leaving no trace on the disk.
Kaspersky’s Behavior Detection component, powered by machine learning and behavioral heuristics, detects malicious activity even if the malware code is previously unknown. The Exploit Prevention technology developed by Kaspersky helps detect and block malware attempting to exploit software vulnerabilities in real time.
Secondly, Social Engineering Attacks which require user participation, typically tricking victims into downloading and executing malicious files under the guise of legitimate software. To counteract such attacks, Kaspersky solutions deploy proactive machine learning-based detection and behavior analysis to identify threats even when obfuscation techniques are used to bypass traditional antivirus solutions.
“2025 should be the year for Sri Lanka businesses to take their cybersecurity one-step forward. With an increasing number of online threats, businesses in the region must strengthen their cybersecurity defenses. Relying solely on traditional security solutions is no longer enough. Organizations need an adaptive and intelligence-led security approach to combat sophisticated cyber threats,” said Sam Yan, Head of Sales for Asia Emerging Countries at Kaspersky.
To aid in this effort, Kaspersky provides Kaspersky Unified Monitoring and Analysis Platform (KUMA), a unified console for monitoring and analyzing cybersecurity incidents. This solution enables organizations to enhance their digital resilience while benefiting from digital transformation.
More information about KUMA can be found here: https://support.kaspersky.com/help/KUMA/1.5/en-US/217694.htm. To stay updated with the latest cyber threat reports, visit Securelist.com.
Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection, specialized security products and services, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help over 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.
