Research by Kaspersky Lab and B2B International shows that businesses don’t need to have external interfaces such as public websites, customer portals and transactional systems to be hit by a DDoS attack: internal web services, operations and connectivity are just as vulnerable.
In 2015, one in six companies worldwide suffered a Distributed Denial of Service (DDoS) attack, rising to a quarter of enterprises. In the Kingdom of Saudi Arabia, 12% of enterprises have reportedly suffered an attack. For most, these attacks focused on external activities. Just under half of those affected said their public websites had been hit, while around a third said that customer portals and logins (38%) and communications services (37%) had been impacted. A quarter found that a DDoS attack had affected transactional systems.
“It’s a relatively easy crime to perpetrate but the effect on business continuity can be far-reaching. Our study found that alongside the well-publicized impact of an attack, such as website downtime, reputational damage and unhappy customers, DDoS hits can reach deep into a company’s internal systems. And it doesn’t matter how small the company is, or whether or not it has a website: if you’re online, you’re a potential target. Unprotected operational systems are just as vulnerable to a DDoS attack as the external website, and any disruption can stop a business in its tracks,” said Evgeny Vigovsky, Head of Kaspersky DDoS Protection, Kaspersky Lab.