REVIEW OF INCIDENTS FOR APRIL 2023
JSC “State Technical Service” reports that 11,575,961 cyberattacks were blocked using the Unified Internet Access Gateway (ESDI) equipment in April of this year, which is 27.7% less than in March of this year.
During the monitoring of the Kazakh segment of the Internet for the presence of threats and incidents of information security, vulnerabilities were discovered, most of which relate to the educational sector. The most common vulnerability during this period was CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, which carries potential risks of unauthorized access to confidential information.
With the help of ESDI equipment, 620 information security incidents related to the spread of botnets in the network of state bodies, local executive bodies, quasi-public and private sectors of the Republic of Kazakhstan were registered. The most common types of botnet in April were Mozi.Botnet,Lethic.Botnet and njRAT.Botnet. It should be noted that a large number of botnets were recorded in local executive bodies.
637 cases of malicious software distribution were registered and processed, most of which were recorded in the network of local executive bodies of the Republic of Kazakhstan.
If you encounter an information security incident, please let us know by toll-free number 1400 (around the clock) or by following the link: https://www.cert.gov.kz/notify-incident , or by email: incident@cert.gov.kz .
