Kaspersky has evolved as a complete cyber-forensics and investigation company

Gaurav Bhatnagar, Head Enterprise Business- Kaspersky

“Kaspersky has been predominantly known for offering endpoint securities and EDR (Endpoint Detection & Response) securities, but it is much more than that now. Eugene Kaspersky, who is the brain behind the company, decided to transform the brand into a complete cyber-forensics and investigation company, besides being an endpoint company. Kaspersky spends more than 70% of its resources globally in R&D. We still believe in selling and marketing our home grown products and don't have the intent to buy or to take over companies across the globe to build our capabilities.

Gone are those days when we saw organizations had random ransomware attacks, where threat actors used to send phishing mails and when clicked on any of the links by any user they would be breached. If you see five years down the line, the trend that we see are attacks becoming much more sophisticated, and specific. Hackers are seen attacking those companies that they target to attack and they have their own objective of attacking it. The intent is very clear as to why they are targeting that particular company. Ransomware attackers are working like an organization nowadays and it is no longer a one man show or a two people company. So they have their own organizations. We have found out in a couple of compromise assessment datasheets that there are so many organized ransomware attackers who have their own entities with a manpower of more than 100.  Interestingly, when they attack any company, it doesn't mean that they have started their attack strategy one or two week or one month back. These companies have their own PTPs, as in why they are targeting you and what the motive is behind. So they have a complete developer team, a web team and our job starts here, when as a cyber-forensic company we analyze in detail the type of attack and the response to those attacks.

There are some common challenges that CIOs face nowadays. Firstly, there is no visibility. When I say visibility, it means the visibility from the dark web surface. In spite of there being so many search engines, which are smart and AI enabled, and we can search so many things on the surface web, there is a lack of visibility on the dark web. Tools to search on the dark web are very rare and the couple of tools which are available, do not give you the granular information you need to keep track of attackers. The second challenge is mitigating these kinds of attacks is too complicated, because everything happens behind closed doors. And plus, attacks have become so sophisticated.”