The number of cyber attacks increased by 6.38 percent, with damages amounting to 4.8 million euros

In the first nine months of this year, the police reported 1,066 cyber attacks causing damages of 4.8 million euros, while the National CERT processed 958 incidents during the same period, of which 42 percent fall into the phishing category, according to the Police Directorate.

The total number of criminal offenses against computer systems, programs, and data reported in the first nine months of this year represents an increase of 6.38 percent compared to the same period last year, when 1,002 cyber attacks were recorded, said Renato Grgurić, head of the Cybersecurity Service of the Police Directorate, at a conference marking European Cybersecurity Month (ECSM).

Grgurić emphasized that the largest number of cyber attacks consists of various forms of computer fraud, which have increased by 10.44 percent compared to the same period last year. He added that the police have recently received more reports from citizens who have been victims of so-called investment fraud.

– These are situations where citizens find advertisements on the internet in which criminal groups from abroad present themselves as legitimate companies and falsely claim that they will invest their money in cryptocurrencies, promising rapid increases in cryptocurrency value and multiple profits – he explained.

Grgurić specified that criminals connect to the victim’s computer using legitimate remote access applications, such as AnyDesk, after which they transfer money from the victim’s account via online banking to accounts opened on cryptocurrency exchanges.

– They then convert the money into cryptocurrencies, most often bitcoins, and transfer them to accounts under their control, leaving the victims without money, often losing tens of thousands of euros – he clarified.

Ransomware among the most severe forms of cyber attacks

He added that among the most severe forms of cyber attacks are cryptolocker ransomware, or malicious ransomware that prevents users from accessing their information systems or devices.

– The perpetrator demands a ransom payment via email, most often in bitcoins. Malicious ransomware spreads in various ways, most commonly through user negligence – by opening malicious links and email attachments, visiting compromised websites, and downloading fake updated applications or compromised software – Grgurić explained.

Nataša Glavor, assistant director of CARNET for the National CERT – the national body for the prevention and protection against computer threats, highlighted that nearly half of cyber attacks fall into the phishing category.

– Due to the frequency of such attacks, it is extremely important to conduct campaigns to raise citizens’ awareness of potential threats and the harm that irresponsible internet use can bring, so they can recognize threats in time and respond appropriately – she said.

Glavor reminded that this year’s ECSM is dedicated to the themes of phishing and ransomware due to the observed frequency of such types of attacks, and that activities are often directed at EU citizens over 50 years old who have access to digital media, social networks, financial digital services, and other communication platforms.