--- title: The Top 5 cyber-attack behaviours in 2021 description: It’s no news to anyone in the know that the tempo of cyber-attacks has risen sharply since the onset of the pandemic. But what may not be as clear to many CIOs and CISOs dealing with the challenge in Australia, is that malicious actors have changed their behaviour in several important ways. image: https://www.enablis.com.au/hubfs/1.%20CrowdStrike%20security%20image-1.jpg --- ![icon-13](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-13.svg) Sydney: [02 8272 4000](tel:0282724000) Support: [1300 887 664](tel:1300887664) ![icon-14](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-14.svg) [info@enablis.com.au](mailto:info@enablis.com.au) [![Enablis](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/Enablis.svg) ](https://www.enablis.com.au/) [ Speak to Us ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLLSvCizWf2Jw2xZi451VjL9LuqA8ueRgrW8adMpNCRQ4FlXntI4wpoe4APcWv22cBL4FcYji%2FxdbPqoyQEZnvbrJbJBlKMkUdgv%2FtQb8GZS3421foxyvO6Zm27LQf6roWNvH5FNakVdn6jRQZwh5VAkWuFrmLxRIxSqDyazFPD68YRKUlv3bIvFp1Ub%2B1o%3D&portalId=19555244) [ Customer Portal ](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLLUGT52GqIj5S0ix9r0QkzyIyKDl376cyN4VHq1qpoFJ5wM9A0mF8wkaI8WwkBIUNuvPVLb5VnWkvQjGfthSmmG%2Fbi2N8rDZTpbnHIlTwVh044Dj659iiJMf31OLt0Lg9g3Z9h0Zbe05Ap7B3AfLIEFQoApuR1%2F7LLmLygtpy3nSoVo77%2FLbl304QPZMkkQ6X5A22niwhKXAdSu&portalId=19555244) - [ About Us ](https://www.enablis.com.au/about-us) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-02](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-02.svg) [ Our Team ](https://www.enablis.com.au/about-us#team) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-03](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-03.svg) [ Case Studies ](https://www.enablis.com.au/case-studies) ![ENA-2025.01-1-11_Website_Homepage_v5_FA2-04](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/ENA-2025.01-1-11_Website_Homepage_v5_FA2-04.svg) [ Partners ](https://www.enablis.com.au/about-us/partners) ![icon-contactus](https://www.enablis.com.au/hubfs/Enablis_May2021/images/icon-contactus.svg) [ Contact us ](https://www.enablis.com.au/about-us/contact) - [ Connectivity ](https://www.enablis.com.au/solutions/connectivity) [ Security ](https://www.enablis.com.au/solutions/security) - [ Managed Services ](https://www.enablis.com.au/managed-services-ensure) [ Professional Services ](https://www.enablis.com.au/services/professional-services) - [ Our Blog ](https://www.enablis.com.au/our-blog) [ Knowledge Centre ](https://www.enablis.com.au/knowledge-centre) # Our Blog Stay up-to-date with the latest communications, technology and security insights. 08 Oct 2021 [Sase, ](https://www.enablis.com.au/our-blog/tag/sase) [Network security, ](https://www.enablis.com.au/our-blog/tag/network-security) [Security strategy, ](https://www.enablis.com.au/our-blog/tag/security-strategy) [Protect, ](https://www.enablis.com.au/our-blog/tag/protect) [#zerotrust, ](https://www.enablis.com.au/our-blog/tag/zerotrust) [#cybersecurity, ](https://www.enablis.com.au/our-blog/tag/cybersecurity) [#cybersecurityfail](https://www.enablis.com.au/our-blog/tag/cybersecurityfail) ## The Top 5 cyber-attack behaviours in 2021 It’s no news to anyone in the know that the tempo of cyber-attacks has risen sharply since the onset of the pandemic. But what may not be as clear to many CIOs and CISOs dealing with the challenge in Australia, is that malicious actors have changed their behaviour in several important ways. Drawing from the latest ‘OverWatch Threat Hunting Report’ by cyber security experts, CrowdStrike, here are the top 5 most notable behavioural changes observed across the cyber landscape in the 12 months to June 30, 2021. 1 – Interactive intrusion is on the rise CrowdStrike reported a whopping 60 percent increase in interactive intrusion activity over the 12 months to June 30, 2021, spanning a broad range of industry verticals and geographic regions. “The threat of hands-on intrusion activity remains very real”, it notes in the report, revealing that it had uncovered interactive intrusion activity attributable to 30 specifically named threat actor groups. In addition, threat hunters uncovered an extensive array of activity suspected of being eCrime or targeted intrusion activity, but not specifically tied to a named group. 2 – Adversaries have moved beyond malware Looking at the huge number of detections indexed by CrowdStrike in the three months to end-June 2021, a full 68 percent were malware-free, with attackers increasingly using more sophisticated, stealthier techniques purpose-built to evade autonomous detections. This includes increasingly trying to woo internal staff of target organisations promising them a share of the spoils. 3 – eCrime consolidates dominance CrowdStrike reports that eCrime continues to dominate the threat landscape, making up 75 percent of all interactive intrusion activity. This stems largely from increased maturity of the big game hunting (BGH) business model, in particular the emergence of so-called ‘access brokers’ which effectively sell the keys to the castle to other criminals willing to pay. eCrime adversaries continue to innovate and evolve their techniques to improve their chances of success. For instance, it’s believed the majority of ransomware offenders in the BGH arena have now added the threat of data leaks via so-called data leak sites (DLS) to their extortion playbooks. 4 – Bad guys are moving with greater speed CrowdStrike also notes that eCrime adversaries are moving with increasing speed to achieve their aims. They’re now being observed as being able to move laterally within victims’ environments in an average of just 1 hour and 32 minutes. Even more alarming, just over a third (36 percent) of adversaries observed managed to move laterally within 30 minutes, with one clocked at just 4 minutes and 13 seconds! 5 – Targeted intrusions attacking telcos and retail While Crowdstrike notes that targeted intrusion adversaries remain a serious threat, they have dramatically increased their focus on the telecommunications industry, accounting for 40 percent of all state-nexus intrusion activity in the past 12 months. Overall, organisations in both the telco and retail sectors experienced a doubling of attacks across the board in the 12 months to June 31, 2021, placing them 2nd and 8th in CrowdStrike’s top 10. The technology sector came in as the most attacked industry, with manufacturing in at 3rd followed by financial services, professional services, universities, and healthcare. The public sector and engineering were the 9th and 10th most targeted sectors respectively. Attackers appearing to operate out of China accounted for the biggest share, followed by North Korea and Iran. However, in the past year, and as noted above CrowdStrike also tracked an uptick in suspected state-nexus activity not attributed to named actor groups. The findings of the CrowdStrike Threat Hunting report underscore the importance of factoring more than merely malware tools, rather deliberate and ongoing efforts by adversaries, in turn demanding cyber security strategies that combine humans with technology tools in order to ensure the best chanced of protection. Chat with an Enablis [security expert today](https://www.enablis.com.au/request-a-call-back-to-speak-with-an-enablis-expert) about protecting your remote workers and data or [Click here](https://lnkd.in/eTEfg54P) to download the report for recommendations to protect your business against current and emerging threats. [ Share ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.enablis.com.au%2Four-blog%2Ftop-5-cyber-attack-behaviours-in-2021) [Next](https://www.enablis.com.au/our-blog/canteen-oct-bandanna-day-21) ### Categories Pick a category - [Network Security (49)](https://www.enablis.com.au/our-blog/tag/network-security) - [IT security (46)](https://www.enablis.com.au/our-blog/tag/it-security) - [SASE (45)](https://www.enablis.com.au/our-blog/tag/sase) - [#cybersecurity (37)](https://www.enablis.com.au/our-blog/tag/cybersecurity) - [#zerotrust (34)](https://www.enablis.com.au/our-blog/tag/zerotrust) - [security strategy (34)](https://www.enablis.com.au/our-blog/tag/security-strategy) - [#Zerotrustnetworkaccess (28)](https://www.enablis.com.au/our-blog/tag/zerotrustnetworkaccess) - [managed service providers in Australia (26)](https://www.enablis.com.au/our-blog/tag/managed-service-providers-in-australia) - [security (25)](https://www.enablis.com.au/our-blog/tag/security) - [Palo Alto Networks (23)](https://www.enablis.com.au/our-blog/tag/palo-alto-networks) - [cloud (19)](https://www.enablis.com.au/our-blog/tag/cloud) - [enablis (18)](https://www.enablis.com.au/our-blog/tag/enablis) - [Network (16)](https://www.enablis.com.au/our-blog/tag/network) - [Enterprise Browser (9)](https://www.enablis.com.au/our-blog/tag/enterprise-browser) - [Not for profit (9)](https://www.enablis.com.au/our-blog/tag/not-for-profit) - [#ZTNA (8)](https://www.enablis.com.au/our-blog/tag/ztna) - [protect (8)](https://www.enablis.com.au/our-blog/tag/protect) - [Identity Management (6)](https://www.enablis.com.au/our-blog/tag/identity-management) - [communications (6)](https://www.enablis.com.au/our-blog/tag/communications) - [donate (6)](https://www.enablis.com.au/our-blog/tag/donate) - [#cybersecurityfail (5)](https://www.enablis.com.au/our-blog/tag/cybersecurityfail) - [Charity (5)](https://www.enablis.com.au/our-blog/tag/charity) - [IT Partner (5)](https://www.enablis.com.au/our-blog/tag/it-partner) - [MS teams voice (5)](https://www.enablis.com.au/our-blog/tag/ms-teams-voice) - [Managed Service Provider (5)](https://www.enablis.com.au/our-blog/tag/managed-service-provider) - [Youth (5)](https://www.enablis.com.au/our-blog/tag/youth) - [collaboration (5)](https://www.enablis.com.au/our-blog/tag/collaboration) - [communication (5)](https://www.enablis.com.au/our-blog/tag/communication) - [digital transformation (5)](https://www.enablis.com.au/our-blog/tag/digital-transformation) - [networking security (5)](https://www.enablis.com.au/our-blog/tag/networking-security) - [social responsibility (5)](https://www.enablis.com.au/our-blog/tag/social-responsibility) - [technology (5)](https://www.enablis.com.au/our-blog/tag/technology) - [video conferencing (5)](https://www.enablis.com.au/our-blog/tag/video-conferencing) - [volunteers (5)](https://www.enablis.com.au/our-blog/tag/volunteers) - [Community Services (4)](https://www.enablis.com.au/our-blog/tag/community-services) - [Information Technology (4)](https://www.enablis.com.au/our-blog/tag/information-technology) - [calling (4)](https://www.enablis.com.au/our-blog/tag/calling) - [managed service (4)](https://www.enablis.com.au/our-blog/tag/managed-service) - [IT (3)](https://www.enablis.com.au/our-blog/tag/it) - [Legacy systems (3)](https://www.enablis.com.au/our-blog/tag/legacy-systems) - [Mimecast (3)](https://www.enablis.com.au/our-blog/tag/mimecast) - [The Benevolent Society (3)](https://www.enablis.com.au/our-blog/tag/the-benevolent-society) - [email security (3)](https://www.enablis.com.au/our-blog/tag/email-security) - [multiple IP telephony platforms (3)](https://www.enablis.com.au/our-blog/tag/multiple-ip-telephony-platforms) - [network security. cloud computing (3)](https://www.enablis.com.au/our-blog/tag/network-security-cloud-computing) - [AI (2)](https://www.enablis.com.au/our-blog/tag/ai) - [IDAAS (2)](https://www.enablis.com.au/our-blog/tag/idaas) - [NFP (2)](https://www.enablis.com.au/our-blog/tag/nfp) - [Okta (2)](https://www.enablis.com.au/our-blog/tag/okta) - [Palo Alto (2)](https://www.enablis.com.au/our-blog/tag/palo-alto) - [attack (2)](https://www.enablis.com.au/our-blog/tag/attack) - [business technology (2)](https://www.enablis.com.au/our-blog/tag/business-technology) - [customers (2)](https://www.enablis.com.au/our-blog/tag/customers) - [employees (2)](https://www.enablis.com.au/our-blog/tag/employees) - [hackers (2)](https://www.enablis.com.au/our-blog/tag/hackers) - [identity (2)](https://www.enablis.com.au/our-blog/tag/identity) - [leadership (2)](https://www.enablis.com.au/our-blog/tag/leadership) - [networks (2)](https://www.enablis.com.au/our-blog/tag/networks) - [secure browser (2)](https://www.enablis.com.au/our-blog/tag/secure-browser) - [4 steps (1)](https://www.enablis.com.au/our-blog/tag/4-steps) - [Aged Care (1)](https://www.enablis.com.au/our-blog/tag/aged-care) - [Australia Malware (1)](https://www.enablis.com.au/our-blog/tag/australia-malware) - [Crowdstrike (1)](https://www.enablis.com.au/our-blog/tag/crowdstrike) - [Disruption (1)](https://www.enablis.com.au/our-blog/tag/disruption) - [IT Budget (1)](https://www.enablis.com.au/our-blog/tag/it-budget) - [IT Challenges (1)](https://www.enablis.com.au/our-blog/tag/it-challenges) - [IT Director (1)](https://www.enablis.com.au/our-blog/tag/it-director) - [IT Services Provider (1)](https://www.enablis.com.au/our-blog/tag/it-services-provider) - [IT consolidation (1)](https://www.enablis.com.au/our-blog/tag/it-consolidation) - [IVE (1)](https://www.enablis.com.au/our-blog/tag/ive) - [MSP (1)](https://www.enablis.com.au/our-blog/tag/msp) - [Management (1)](https://www.enablis.com.au/our-blog/tag/management) - [NBN (1)](https://www.enablis.com.au/our-blog/tag/nbn) - [NFP's (1)](https://www.enablis.com.au/our-blog/tag/nfps) - [Race4Change (1)](https://www.enablis.com.au/our-blog/tag/race4change) - [SD-WAN (1)](https://www.enablis.com.au/our-blog/tag/sd-wan) - [Security Partner (1)](https://www.enablis.com.au/our-blog/tag/security-partner) - [Shadow IT (1)](https://www.enablis.com.au/our-blog/tag/shadow-it) - [Strategic IT (1)](https://www.enablis.com.au/our-blog/tag/strategic-it) - [Sydney (1)](https://www.enablis.com.au/our-blog/tag/sydney) - [The Y NSW (1)](https://www.enablis.com.au/our-blog/tag/the-y-nsw) - [Wearables (1)](https://www.enablis.com.au/our-blog/tag/wearables) - [Z Scaler (1)](https://www.enablis.com.au/our-blog/tag/z-scaler) - [aged care partner (1)](https://www.enablis.com.au/our-blog/tag/aged-care-partner) - [aged care technology provider (1)](https://www.enablis.com.au/our-blog/tag/aged-care-technology-provider) - [amalgamation (1)](https://www.enablis.com.au/our-blog/tag/amalgamation) - [connectivity (1)](https://www.enablis.com.au/our-blog/tag/connectivity) - [csr (1)](https://www.enablis.com.au/our-blog/tag/csr) - [cutting edge technology (1)](https://www.enablis.com.au/our-blog/tag/cutting-edge-technology) - [data (1)](https://www.enablis.com.au/our-blog/tag/data) - [ivy (1)](https://www.enablis.com.au/our-blog/tag/ivy) - [kitchen (1)](https://www.enablis.com.au/our-blog/tag/kitchen) - [malware (1)](https://www.enablis.com.au/our-blog/tag/malware) - [merger (1)](https://www.enablis.com.au/our-blog/tag/merger) - [mid size business (1)](https://www.enablis.com.au/our-blog/tag/mid-size-business) - [middle size business (1)](https://www.enablis.com.au/our-blog/tag/middle-size-business) - [mobility (1)](https://www.enablis.com.au/our-blog/tag/mobility) - [network infrastructure (1)](https://www.enablis.com.au/our-blog/tag/network-infrastructure) - [new technology (1)](https://www.enablis.com.au/our-blog/tag/new-technology) - [obk (1)](https://www.enablis.com.au/our-blog/tag/obk) - [optimal strategy (1)](https://www.enablis.com.au/our-blog/tag/optimal-strategy) - [outsourcing IT (1)](https://www.enablis.com.au/our-blog/tag/outsourcing-it) - [people with disability (1)](https://www.enablis.com.au/our-blog/tag/people-with-disability) - [race for change (1)](https://www.enablis.com.au/our-blog/tag/race-for-change) - [ransomware (1)](https://www.enablis.com.au/our-blog/tag/ransomware) - [strategy (1)](https://www.enablis.com.au/our-blog/tag/strategy) - [top managed service providers in sydney (1)](https://www.enablis.com.au/our-blog/tag/top-managed-service-providers-in-sydney) - [voice (1)](https://www.enablis.com.au/our-blog/tag/voice) - [zscaler (1)](https://www.enablis.com.au/our-blog/tag/zscaler) ### Recent Posts - [ The AI Threat Shift Is Accelerating: The 3 things Organisations Need to Know Now ](https://www.enablis.com.au/our-blog/the-ai-threat-shift-is-accelerating-what-organisations-need-to-know-now) - [ Your business runs on the browser. Your security model doesn’t. ](https://www.enablis.com.au/our-blog/your-business-runs-on-the-browser.-your-security-model-doesnt) - [ Stride Outside This September with Stride Mental Health and Enablis ](https://www.enablis.com.au/our-blog/stride-outside-this-september-with-stride-mental-health-and-enablis) - [ The Role of Enterprise Browsers in a SASE Framework ](https://www.enablis.com.au/our-blog/the-critical-role-of-enterprise-browsers-in-a-sase-framework) - [ Gartner names Palo Alto Networks Leader in 2025 EPP Magic Quadrant Report ](https://www.enablis.com.au/our-blog/gartner-names-palo-alto-networks-leader-in-epp-magic-quadrant-report) [Next](https://www.enablis.com.au/our-blog/tips-to-balance-user-experience-with-best-of-breed-security) #### Stay ahead in a connected world Get expert insights on connectivity and cybersecurity. Subscribe to the Enablis blog today. [![logo white](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/logoo%20white.svg) ](https://www.enablis.com.au/) Keeping your business connected, protected and ready for what's next. [![icon-13](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-13.svg) ](tel:+610282724000) [ +61 (02) 8272 4000 ](tel:+610282724000) [![icon-14](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-14.svg) ](mailto:info@enablis.com.au) [ info@enablis.com.au ](mailto:info@enablis.com.au) [![icon-16](https://www.enablis.com.au/hubfs/Enablis%20-%202025/Images/icon-16.svg) ](https://maps.app.goo.gl/rdnkT6SLgt1vLHRPA) [ Level 3, 16 Spring Street, Sydney, NSW, 2000 ](https://maps.app.goo.gl/rdnkT6SLgt1vLHRPA) Follow Us ###### [Connectivity](https://www.enablis.com.au/solutions/connectivity) ###### [Security](https://www.enablis.com.au/solutions/security) ###### Services ###### About Us © 2026 Enablis Pty Ltd. All rights reserved. [ Privacy Policy ](https://www.enablis.com.au/our-blog/top-5-cyber-attack-behaviours-in-2021#popup) ## Privacy Policy of Enablis ###### Why do we have a Privacy Policy? Enablis may hold and use information about you in your capacity as a consumer, a business customer, or in any other capacity. If you are visiting any of our websites or using any our services, by continuing to do so, you indicate your agreement to our use of your personal information as set out in this Privacy Policy. Your privacy is important to us. We want you to feel confident about the personal information we hold about you. Enablis takes your privacy seriously and takes all reasonable care to prevent any unauthorised access to your personal information. Enablis is committed to dealing with personal data in the spirit of the Data Protection Act 1998 (“the Act”) and protecting personal privacy in accordance with the law. ###### What does this Privacy Policy cover? This Privacy Policy only applies to how Enablis deals with your personal information. Third party websites that you can link to from Enablis’ websites are not covered by our Privacy Policy and we accept no responsibility or liability for these sites. We recommend that you check the privacy policy of any site you visit. ###### What information do we collect, and when do we collect it? In general, you can visit Enablis websites without giving us any personal information. We collect general information about visitors to our websites, to help us improve our websites and services. This includes how many visitors there are to our sites and how long they view each page. In certain circumstances we may ask for personal information about you. These include if you enter any of our competitions or promotions, subscribe to one of our services, request an audit, complete a survey, submit and enquiry or register for one of our events. We may ask you for information to enable us to provide a service to you. We collect this information in a number of ways, including via telephone, written correspondence, email and websites. If we provide a service to you, we may have information about your use of that service. ###### Cookies Enablis may use cookies to collect information from visitors to our websites. Cookies may contain personal information. A cookie is a text file which saved onto your computer when you visit a website. Your browser may allow you to choose whether to accept cookies or not, and if you choose to accept cookies, you may be able to allow different levels of acceptance. ###### Other technologies Enablis may use other technologies on our websites and in e-mail communications to determine, for example, how many visitors have visited certain pages, opened messages or clicked on links. ###### What do we do with the information we collect? We use the personal information we collect to help personalize your online experience, as well as for administration and marketing purposes. - We are obliged to do so by law; or - With your consent; or - Where necessary to provide the products and services chosen by you; or - In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets; or - If Enablis or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets. ###### Your ability to opt out You can opt out of all Marketing communications by contacting our Marketing team on telephone 02 8272 4000 or via email through our website contact page. ###### Contact Us If you have any questions or concerns about the information we hold about you and how we use it, please contact our Marketing team on telephone 02 8272 4000 or via email through our website contact page. ###### Changes to This Privacy Policy We reserve the right to change the terms of this Privacy Policy at any time. When we make changes, we shall update the version number of the policy and publish the latest policy on our websites. We encourage you to review this policy whenever you visit one of our sites. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Enablis", "url" : "https://www.enablis.com.au/our-blog/author/enablis" }, "dateModified" : "2025-06-30T07:24:09.151Z", "datePublished" : "2021-10-08T04:30:11.000Z", "headline" : "The Top 5 cyber-attack behaviours in 2021", "image" : [ "https://www.enablis.com.au/hubfs/1.%20CrowdStrike%20security%20image-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.enablis.com.au/our-blog/top-5-cyber-attack-behaviours-in-2021", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.enablis.com.au/hubfs/Imported%20sitepage%20images/logo-new.png" }, "name" : "Enablis PTY LTD" } } ```