ENISA Threat Landscape 2020 - List of top 15 threats

ENEN From January 2019 to April 2020

List of top 15 threats

ENISA Threat Landscape

Top threats

ENISA Threat Landscape Report #1 Malware

Analysis and trends of the malware threat between January 2019 and April 2020. st Malware ranked 1 in the threat

READ THE REPORT

landscape, maintaining the same position from 2018.

ENISA Threat Landscape Report #2 Web-based attacks

Trend analysis of web-based attacks between January 2019 and April 2020. nd Web based attacks ranked 2 in the

READ THE REPORT

threat landscape, maintaining the same position from 2018.

ENISA Threat Landscape Report #3 Phishing

Trend analysis of the phishing threat between January 2019 and April 2020. rd Phishing attacks ranked 3 in the threat READ THE REPORT th landscape, raising from the 4 position in 2018.

ENISA Threat Landscape Report #4 Web application attacks

Analysis and trends of web application attacks between January 2019 and April th 2020. Web applications attacks ranked 4

READ THE REPORT

in the threat landscape descending from rd the 3 position in 2018.

ENISA Threat Landscape Report #5 Spam

Trend analysis of spam attacks between January 2019 and April 2020. Spam READ THE REPORT th ranked 5 in the threat landscape rising th from the 6 position in 2018.

ENISA Threat Landscape Report #6 DDoS

Trend analysis of DDoS attacks between January 2019 and April 2020. DDoS attacks th ranked 6 in the threat landscape, READ THE REPORT th descending from the 5 position in 2018.

Top threats

ENISA Threat Landscape Report #7 Identify theft

Analysis and trends of the identity theft threat between January 2019 and April th 2020. Identity theft ranked 7 in the threat READ THE REPORT th landscape, rising from the 13 position in 2018.

ENISA Threat Landscape Report #8 Data breach

Trend analysis of data breach attacks between January 2019 and April 2020. th Data breach ranked 8 in the threat

READ THE REPORT

landscape, maintaining the same position from 2018.

ENISA Threat Landscape Report #9 Insider threat

Trend analysis of the insider threat between January 2019 and April 2020. th Insider threat ranked 9 in the threat

READ THE REPORT

landscape, maintaining the same position from 2018.

ENISA Threat Landscape Report #10 Botnets

Analysis and trends of the identity theft threat between January 2019 and April 2020. BotNets attacks ranked 10th in the

READ THE REPORT

ENISA Threat Landscape Report #11 Physical manipulation, damage, theft and loss

Physical manipulation, damage, theft and th loss attacks ranked 11 in the threat

READ THE REPORT

ENISA Threat Landscape Report #12 Information leakage

Trend analysis of information leakage threat between January 2019 and April 2020. Information leakage attacks ranked READ THE REPORT th 12 in the threat landscape, descending th from the 11 position in 2018.

Top threats

ENISA Threat Landscape Report #13 Ransomware

Analysis and trends of the identity theft threat between January 2019 and April th 2020. Ransomware ranked 13 in the READ THE REPORT th threat landscape, rising from the 14 position in 2018.

ENISA Threat Landscape Report #14 Cyberespionage

Trend analysis of cyberespionage between January 2019 and April 2020. Cyberespionage ranked 14th in the threat READ THE REPORT th landscape, rising from the 15 position in 2018.

ENISA Threat Landscape Report #15 Crytojacking

Trend analysis of cryptojacking between January 2019 and April 2020. Cryptojacking th attacks ranked 15 in the threat landscape, READ THE REPORT th descending from the 13 position in 2018.

“During the next decade, cybersecurity risks will become harder to assess and interpret due to the growing complexity of the threat landscape, adversarial ecosystem and expansion of the attack surface.”

Related

ENISA Threat Landscape Report The year in review

A summary on the cybersecurity trends for the period between January 2019 and April 2020.

READ THE REPORT

ENISA Threat Landscape Report Main incidents in the EU and worldwide

Main cybersecurity incidents happening between January 2019 and April 2020.

READ THE REPORT

ENISA Threat Landscape Report Research topics

Recommendations on research topics from various quadrants in cybersecurity READ THE REPORT and cyberthreat intelligence.

ENISA Threat Landscape Report Sectoral and thematic threat analysis

Contextualised threat analysis between January 2019 and April 2020.

READ THE REPORT

ENISA Threat Landscape Report Emerging trends

Main trends in Cybersecurity observed

READ THE REPORT

between January 2019 and April 2020.

ENISA Threat Landscape Report Cyber Threat Intelligence overview

The current state of play of cyberthreat intelligence in the EU.

READ THE REPORT

About

_ The agency The European Union Agency for Cybersecurity, ENISA, is the Union’s agency dedicated to achieving a high common level of cybersecurity across Europe. Established in 2004 and strengthened by the EU Cybersecurity Act, the European Union Agency for Cybersecurity contributes to EU cyber policy, enhances the trustworthiness of ICT products, services and processes with cybersecurity certification schemes, cooperates with Member States and EU bodies, and helps Europe prepare for the cyber challenges of tomorrow. Through knowledge sharing, capacity building and awareness raising, the Agency works together with its key stakeholders to strengthen trust in the connected economy, to boost resilience of the Union’s infrastructure, and, ultimately, to keep Europe’s society and citizens digitally secure. More information about ENISA and its work can be found at www.enisa.europa.eu. Contributors Christos Douligeris, Omid Raghimi, Marco Barros Lourenço (ENISA), Louis Marinos (ENISA) and all members of the ENISA CTI Stakeholders Group: Andreas Sfakianakis, Christian Doerr, Jart Armin, Marco Riccardi, Mees Wim, Neil Thaker, Pasquale Stirparo, Paul Samwel, Pierluigi Paganini, Shin Adachi, Stavros Lingris (CERT EU) and Thomas Hemker. Editors Marco Barros Lourenço (ENISA) and Louis Marinos (ENISA). Contact For queries on this paper, please use enisa.threat.information@enisa.europa.eu. For media enquiries about this paper, please use press@enisa.europa.eu. Legal notice Notice must be taken that this publication represents the views and interpretations of ENISA, unless stated otherwise. This publication should not be construed to be a legal action of ENISA or the ENISA bodies unless adopted pursuant to the Regulation (EU) No 526/2013. This publication does not necessarily represent state-of the-art and ENISA may update it from time to time. Third-party sources are quoted as appropriate. ENISA is not responsible for the content of the external sources including external websites referenced in this publication. This publication is intended for information purposes only. It must be accessible free of charge. Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information contained in this publication. Copyright Notice © European Union Agency for Cybersecurity (ENISA), 2020 Reproduction is authorised provided the source is acknowledged. Copyright for the image on the cover: © Wedia. For any use or reproduction of photos or other material that is not under the ENISA copyright, permission must be sought directly from the copyright holders. ISBN: 978-92-9204-354-4 DOI: 10.2824/552242

Vasilissis Sofias Str 1, Maroussi 151 24, Attiki, Greece Tel: +30 28 14 40 9711 info@enisa.europa.eu www.enisa.europa.eu

All rights reserved. Copyright ENISA 2020. https://www.enisa.europa.eu