Our Approach

Definitive Guide to Ransomware

Cybersecurity for the Logistics sector

Over the past few years Hunt & Hackett has observed a discerning increase of activity of Advanced Persistent Threat (APT) groups in the logistics sector. There is this legendary quote from Sun Tzu on how to overcome your adversaries: 'know thy enemy and know yourself; in a hundred battles, you will never be defeated'. To know your enemy starts with gaining an understanding of yourself, your threat landscape, your adversaries’ intentions, their modus operandi, and specific attacking methods. On this page, the cyberthreats to the logistics are explored. Understanding the full picture of the challenges our clients may encounter helps us in doing what we do best: ensuring security for your business from specific cyber threats targeting your organization. 

Request a free membership to access our full research insights

Threat landscape

For the logistics industry

0

Advanced Persistent Threats (APTs)

0

Tactics, Techniques & Procedures (TTPs)

0

Attack tools

Logistics Logistics + related Broader focus All known
APTs 96 136 193 483
TTPs 1,619 1,998 2,458 3,325
Attack tools 1,291 1,577 1,996 2,806

Logistics faces more cyber threats than ever

To stay in control becomes increasingly difficult

While logistics companies are scrambling to meet the growing global demand with faltering resources and input from the supply-chain, malicious actors are inflicting damage to businesses even more. Driven by motivations that range from financial, such as ransomware attacks, to espionage, organizations active in logistics have made it to the top of the list of hacker groups. The threat diagnostic system that was developed by Hunt & Hackett, helps organizations to get insight into who, how and why logistics companies are being attacked and how to address the threat appropriately.

Actors and their motivation

The most active attack groups targeting the logistics sector are shown in this chart highlighting which motivations are driving the various actors active in this sector.

Knowing the APT groups, their motivations and origin countries provides a solid starting point for understanding what you are up against. To get a more comprehensive understanding of the threat landscape, it is important to research, map, and document your adversaries’ intentions to their modus operandi, attack methods and attack tools, as this provides more actionable information for strenghtening your defences.

More detailed information on the threat landscape for this sector?

Our articles about the logistics sector

From Hunt & Hackett experts

Our approach

Controlling your cybersecurity risks

In their fight against cyber attacks, our customers typically go through several stages of maturity. By ramping up their prevention, detection and incident readiness over time – and optimizing this for their actual threat landscape – they reach a point where they have developed solid resilience against targeted attacks, with only highly controlled and accepted risks remaining.

There is no simple 'fix' to become resilient against the sophisticated cyber threats of today. Without serious resources or processes for systematic security activities, protection against modern cyber threats like ransomware is just a wish. Hunt & Hackett has developed a unique threat- and sector-driven approach to cybersecurity, enabling you to work from your current situation to a highly improved and controlled situation, optimized for your specific threat landscape and context as an organisation.

Schietschijven1

STAGE 1: Unknown risk
Pre-monitoring
-

Preventitive controls
 
Limited resilience
 
 
Schietschijven2-1

STAGE 2: Reduced risk
Post-monitoring
-

Preventitive CIS controls (IG1)

Detection & response controls

Resilience against non-targeted attacks
Schietschijven3

STAGE 3: Controlled risk
Implemented roadmap
-

Alignment between preventitive, detection & response CIS controls (IG2)

Resilience against non-targeted and semi-targeted attacks
 
Schietschijven4

STAGE 4: Highly controlled risk
Targeted attack resilience
-

Full redundancy between preventitve, detection & response CIS controls (IG3)
 
Resilience against against advanced targeted attacks
 

Our services

Optimized for the logistics sector

Because we use your actual threat landscape and your sector as our starting points, our services are optimised for your specific context and needs.

Managed Detection & Response (MDR)

We detect & react to attacker activity in your environment, minimizing the impact on your business.

Security Program Gap Assessment (SPGA)

We assess your current security program, threat landscape, security controls and risk.

Incident Response (IR)

We help you manage a cyber crisis and contain security incidents, breaches and cyber threats.

Breach & Attack Simulation (BAS)

We validate your security choices by simulating attacks.

Learn more about our threat research?