Sony Pixel Power calrec Sony

Thales presents the 2022 Thales Cyberthreat Handbook





The public health crisis has created new vulnerabilities due to the increase in remote working, growing use of data networks and the digitalisation of almost every sector of the economy. Between 2020 and 2021 in Europe, this led to an unprecedented 37.7% increase in the number of cyberattacks, according to Frances national information systems security agency (ANSSI).

Developing good cyber hygiene practices and a better knowledge and understanding of cyberattacks are the only ways to address this situation and collectively develop an effective response to cyberthreats.

As part of this effort, Thaless Cyber Threat Intelligence (CTI) unit gathers, analyses, filters and correlates data on each type of attack, the hackers behind them and the techniques, tactics and procedures they use, in order to improve the ability of organisations to detect cyberattacks and fight against them.

The Thales CTI unit has just published the 2022 edition of its Thales Cyberthreat Handbook on the Internet, with details about the extent of these attacks and the ways in which hacker groups are organised.

The 2022 Thales Cyberthreat Handbook was published on the Internet today and is updated on a permanent basis. Over the last five years, experts from Thaless CTI unit have analysed more than 20,000 attacks in nine geographic areas and 16 sectors of activity. These cyberattacks point to an impressive level of organisation within the hacker community as well as the emergence of new types of advanced persistent threats and new hybrid relationships between the public sector and private operators.

Growing professionalism in the hacker community

To expand their activities and boost profitability, hacker groups have gradually organised and structured their operations along the same lines as small or medium-sized businesses. Their new organisations include R&D departments to improve the effectiveness of cyberattacks and constantly develop innovative techniques and attack profiles, human resources departments to recruit new hacker profiles, and legal departments to negotiate financial arrangements with attack victims.

According to the 2022 Thales Cyberthreat Handbook, the increasing number of organisations that agree to pay a ransom to retrieve their data after an attack suggests that these legal departments play a crucial role in guaranteeing the lucrative nature of malicious cyber activity. In 2021, 32% of the organisations targeted by a cyberattack agreed to pay a ransom to the hackers, compared with 26% in 2020. One hacker group even managed to extort 180 million euros from the victims of a single cyberattack.

In their constant quest for profitability, many hackers conduct cost/benefit analyses to identify the industries and countries that are the most open to digitalisation of their business models. The Thales Cyberthreat Handbook reveals that 72% of the 20,000 attacks analysed targeted the defence sector and public administrations, and 62% targeted the telecommunications sector. North America accounted for 72% of the attacks, and Europe accounted for 66%.

A growing number of dormant state-sponsored cyberattacks

The 2022 Thales Cyberthreat Handbook also reports a rise in the number of state-sponsored attacks over the last five years, in particular linked to the growing use of dormant malware. In this type of attack, the hackers install a virus on the organisations IT system to gain access to the data on its networks and can then conduct long-term espionage operations, which are more dangerous by definition.

Dormant malware can remain undetected on an organisations systems for anything from two years to more than a decade. This kind of attack is becoming more prevalent as private enterprises work more closely with government agencies to counter cyberthreats, and as hackers become better organised and more professional. Today, more and more governments outsource their cyber activity and have become increasingly reliant on outside hacker groups.

This deep dive into hacker profiles and their techniques, tactics and procedures in selected regions and sectors is designed to help organisations prepare for future cyberthreats. This world atlas of cyberthreats is a particularly important resource today in that the vast majority of incidents in regions such as Africa still go unreported. In a continent that now has 601 million users of digital services - almost as many as in Europe - the invisible nature of the risk is very worrisome. And entire regions are yet to be explored. The 2022 Thales Cyberthreat Handbook aims to make as much information available to as many people as possible in order to lay the foundations for a global solution to the issues in hand, saysIvan Fontarensky, Technical Director, Cyberdefence, Thales.

Thales and Cybersecurity

Thales serves 130 major customers worldwide, including governments, critical national infrastructure providers and public administrations. The Group provides cybersecurity for 19 of the worlds 20 largest banks, nine of the 10 Internet giants, as well as thousands of businesses of all sizes.

The Thales value proposition is based on three major product families:

Cybels, a complete platform of cybersecurity services including risk assessment, training and simulation, and cyberattack detection and response

Sovereign products including encryptors and sensors to protect critical information systems

A digital platform for data protection, cloud security and access control

To find out more, please visit our dedicated Thales Media Day web page, which is updated regularly. Recordings of the panel discussions, the opening session and the wrap-up address will also be available after the Thales Media Day event.

The Thales Cyberthreat Handbook can be downloaded here.


PR_Cyber Threat Handbook.pdf


Marion Bonnet, Press and soci
See more stories from thales

More from Thales


Thales and Etihad Rail sign a Memorandum of Understanding to support sustainable transportation projects in the Middle East

Facebook Twitter LinkedIn This MoU will allow Thales and Etihad Rail to de...


Confidence in Addressing Security Challenges of Hybrid Work Improving Among Businesses, Finds Thales

Facebook Twitter LinkedIn 84% of IT professionals have some degree of conf...


Thales and Dubai Roads and Transport Authority save 15% energy of Dubai metro

Facebook Twitter LinkedIn Rail transportation is widely known as an excellent alternative for energy efficiency. Thales has developed an Automatic Train C...


Thales presents its cyber-secured solutions for more connected rail transport at InnoTrans 2022

Facebook Twitter LinkedIn Among its broad range of innovative devices and ...


SonarTech and Thales Partner to Further Develop Mine Warfare Systems in Korea

Facebook Twitter LinkedIn Korean defense SME, SonarTech and Thales have signed a Memorandum of Understanding (MoU) for joint in-depth research and develop...


Thales and SMRT Trains partner on next-generation rail signalling technologies for greener rides in Singapore

Facebook Twitter LinkedIn Singapore's Mass Rapid Transit (SMRT) system...


Software Rpublique adds six more start-ups to its incubator and announces a new project

Facebook Twitter LinkedIn A second batch of start-ups joins the Software R...


Thales's digital rail solutions contribute to offer greener rides to passengers

Facebook Twitter LinkedIn Railways can play a vital role in mitigating cli...


Thales rolling laboratory Lucy dedicated to autonomous rail technologies has arrived at InnoTrans

Facebook Twitter LinkedIn For the first time, Thales' rolling laborato...


Thales Showcases the Safe and Efficient Management of Drones in Taiwanese Airspace

Facebook Twitter LinkedIn Thales demonstrated its integrated UAV Traffic M...


Thales at InnoTrans 2022: pathing the way for autonomous, sustainable and cybersecured transport

Facebook Twitter LinkedIn Thales latest innovations making sustainable mob...


Emirates A350 fleet to fly with Thales' AVANT Up

Facebook Twitter LinkedIn Emirates has selected Thales' AVANT Up, the next generation inflight entertainment system for their new fleet of Airbus A350...


Safran enters into exclusive negotiations with Thales to acquire its aeronautical electrical systems activities

Facebook Twitter LinkedIn Paris, September 5, 2022 Safran announced that ...


Thales appoints Emily Tan as Country Director and Chief Executive for Singapore

Facebook Twitter LinkedIn Thales Hailing from global energy giant Shell, Emily brings over twenty-five years of international management experience gai...


Thales delivering digital trust for safety-critical systems on UK rail network

Facebook Twitter LinkedIn Thales has won a new contract to implement Certificate Authority/Public Key Infrastructure across Network Rail's estate. Th...


Telit and Thales announce the creation of a leading western IoT solutions provider: Telit Cinterion

Facebook Twitter LinkedIn Telit and Thales jointly announce intended trans...


Thales acquires full ownership of Advanced Acoustic Concepts (AAC)

Facebook Twitter LinkedIn Thales Defense & Security, Inc. (TDSI) has acquired full ownership of Advanced Acoustic Concepts (AAC), their joint venture with...


Thales and SMRT Trains Ink Long-Term Services Support Contract to Bolster Reliability of Signalling System

Facebook Twitter LinkedIn SMRT Trains and Thales, with support from the La...


Thales reports its 2022 half-year results

Facebook Twitter LinkedIn Order intake1: 11.2 billion, up 46% ( 43% on an organic basis2) Sales: 8.3 billion, up 7.7% ( 5.4% on an organic basis) EBIT...


Falcon algorithm co-developed with Thales selected by the NIST as a new standard in post-quantum cryptography

Facebook Twitter LinkedIn The US National Institute of Standards and Techn...


Spirit Airlines' A320s and A321s 100% connected with Thales' FlytLIVE solution

Facebook Twitter LinkedIn FlytLIVE by Thales provides Spirit Airlines'...


Signature of Thales Reality H simulator contract to equip the new Atlantic Airways training centre in the Faroe Islands

Facebook Twitter LinkedIn Atlantic Airways and Thales have signed a contra...


Ericsson, Qualcomm and Thales to take 5G into space

Facebook Twitter LinkedIn The activity follows approval for satellite-driven 5G non-terrestrial networks (5G NTNs) from the 3GPP global telecommunications...


ATHEA selected by the French Ministry of the Armed Forces for last phase of project ARTEMIS.IA

Facebook Twitter LinkedIn Dominique Luzeaux, Director of the French Defens...


Thales supports employment in Nouvelle-Aquitaine by training experts in defence aerospace

Facebook Twitter LinkedIn Thales's Ch tellerault-La Brelandi re site i...


Thales and TransLink confirm two new SkyTrain projects to better serve Metro Vancouver

Facebook Twitter LinkedIn Thales was awarded by TransLink two new contract...


Thales acclre sa stratgie d'investissement dans l'open source hardware

Facebook Twitter LinkedIn En tant qu'initiateur du Deuxi me concours national tudiant RISC-V co-organis avec le GDR SOC2 et le CNFM1, Thales a r com...


Thales to recruit 11,000 people worldwide, including 4,000 in France, to drive the next disruptive innovations

Facebook Twitter LinkedIn After hiring 9,000 people worldwide in 2021, Tha...


NAVER Cloud hosts Korea's first Sovereign Cloud-based HSM Service powered by Thales

Facebook Twitter LinkedIn NAVER Cloud hosts Koreas first cloud-based hardw...


Cloud data breaches and cloud complexity on the rise, reveals Thales

Facebook Twitter LinkedIn Multi-cloud adoption is accelerating with 72% of organizations using multiple IaaS providers vs. 57% in 2021 46% of organizatio...


Thales starts the execution of the signalling installations contract for the Valladolid East Bypass, intended for freight trains

Facebook Twitter LinkedIn Thales was awarded by Adif the new project of Va...


Quantum technologies: Thales and SYRLINKS to develop next-generation atomic clocks for civil and defence applications

Facebook Twitter LinkedIn Thales and SYRLINKS, a French company based in R...


Software Rpublique unveils its first milestones for intelligent, secure and sustainable mobility

Facebook Twitter LinkedIn Paris, June 17, 2022. Software R publique, an ...


Thales technology selected for the new Schengen Entry Exit System' in Spain

Facebook Twitter LinkedIn In 2017, the European Union adopted a new directive for the deployment of a biometric Entry-Exit registration system (EES) for M...


SCORPION programme: the GRIFFON SAN is qualified by the DGA

Facebook Twitter LinkedIn In accordance with the framework set by the SCORPION programme, the Sanitary version of the GRIFFON has recently been qualified ...


Thales' Pulse dynamic power supply wins prestigious Crystal Cabin Award

Facebook Twitter LinkedIn During the special gala event held on June 14, 2022 at Aircraft Interiors Expo, Thales was recognized by the Crystal Cabin Award...


Thales launches HELIXVIEW, a revolutionary airport scanner allowing passenger to not remove item from luggage

Facebook Twitter LinkedIn Thales launches HELIXVIEW, its new innovative, s...


Partners Arquus, Thales and NTGS present the new Sherpa A2M at Eurosatory 2022

Facebook Twitter LinkedIn On June 14th, 2022, Arquus, Thales and NTGS have officially presented the new Sherpa A2M (Advanced Mobile Mortar), during a cere...


Thales launches VisioLoc geolocalisation system for soldiers engaged in high-intensity combat

Facebook Twitter LinkedIn Interested in this topic? Come and meet us at th...


Thales launches an AI-based Tactical Training and Simulation

Facebook Twitter LinkedIn Interested in this topic? Come and meet us at the Thales Pavilion at Eurosatory for a Press Tour dedicated to Tactical Engagemen...


Thales selected by Airservices Australia to carry out drone surveillance trials at Sydney airport

Facebook Twitter LinkedIn Airservices Australia has chosen Thales as its p...


Thales at Eurosatory 2022: serving the armed forces now and in the future

Facebook Twitter LinkedIn Thales will be present at Eurosatory 2022 from June 13 to 17 (pavilion C500). The Thales pavilion is organized around an immers...