Cybersecurity has changed dramatically since 2010

#Cybersecurity has changed dramatically since 2010, we've seen a shift from hacking to prank or steal a little money to "cyberwarfare" that can crush a country's economy and infrastructure.

The following is a research and summary of the most major cyberattack events since 2010 to date, broken down by period:

1. The Age of Cyber Weapons (2010 – 2012)

2010: Stuxnet (the beginning of the Cyber Wars)

• Target: Iran's Natanz nuclear plant.

• Cruelty: This is the first time in history that computer code can cause "physical destruction."

• Processing: The malware goes in and commands the centrifuges to spin at excessive speeds until the machine explodes, as it sends fake data to the control computer that "everything is working normally."

• Suspects: The United States and Israel.

២០១២: Saudi Aramco (Shamoon)

• Target: Saudi Arabia's national oil company.

• Malware: An early use of Wiper Malware.

• Impact: 30,000 PCs were completely wiped out of hard disks, the company had to cut off the internet and revert to using typewriters and cell phones instead for several weeks.

2. The Age of Giant Data Theft (2013 - 2016)

២០១៣-២០១៤: Yahoo Data Breach

• Event: The largest data breach in history.

• Impact: All 3 billion (3 billion) Yahoo accounts were hacked by hackers.

២០១៤: Sony Pictures Hack

• Attacker: Team Lazarus (North Korea).

• Why: Angry at the sitcom "The Interview," which teased the North Korean leader.

• Impact: Hackers stole leaders' confidential emails, unreleased movies, and used Wiper to wipe out Sony's servers.

3. The Age of Ransomware and Wipers (2017)

The year 2017 is known as the "Year of Disaster."

May 2017: WannaCry

• Category: Ransomware + Worm (self-spreading).

• Weapons: Use the EternalBlue code (stolen from the US NSA).

• Impact: More than 200,000 computers in 150 countries are locked down as the British health system (NHS) crashes, patients are sent to emergency services elsewhere.

June 2017: NotPetya

• Destination: Ukraine (but spread across the world).

• Cruelty: It pretends to be ransomware extorting money, but in reality it is a Wiper (created to destroy the public).

• Damage: Shipping giant Maersk had to crash port operations worldwide.

4. Age of Supply Chain Attack (2018 – 2021)

២០២០: SolarWinds (Sunburst)

• Technical: Supply Chain Attack (attacking suppliers to gain access to customers).

• Running: Hackers (suspected Russians) hacked into SolarWinds and modified their software update.

• Result: More than 18,000 victims, institutions have opened the door for hackers to enter.

២០២១: Colonial Pipeline

• Event: The DarkSide (Ransomware) group has attacked the largest oil pipeline in America.

• Impact: The company had to shut down a pipeline, causing a gas shortage on the U.S. East Coast.

Late 2021: Log4Shell (Log4j)

• Not an attack, but a hollow space: A bug was found in Log4j (Java's library used almost everywhere).

• Ruthlessness: A hacker simply typing a phrase into a Chat or Search Box can also take control of the server.

5. The Present Age (2023 – 2025/2026)

២០២៣: MOVEit Transfer (Cl0p Ransomware)

• Technical: A hacker finds a voidhole in a file transfer program named MOVEit.

• Impact: They steal data from thousands of organizations, including the BBC, British Airways, and U.S. government institutions.

២០២៤: Snowflake Attacks (Identity Theft)

• Destination: Cloud Data Company (Snowflake).

• Technical: Hackers did not hack the Snowflake system, but they did use a stolen username/password from elsewhere (Credential Stuffing) to log in to a customer account that did not have MFA deposited.

• Victims: Ticketmaster (leaking millions of tickets), Santander Bank, and many other major companies.

2025 – Present:

• Trending: The use of AI to generate malware and scams (Deepfake Phishing) is on the rise.

• Crackdown: International police have been cracking down on LockBit and BlackCat's servers, but these groups are still trying to make a comeback in the new picture.

#សរុបជារួម

• 2010-2012: Physical Attack (Stuxnet).

• 2013-2016: Data Theft Giants (Yahoo, Sony).

• 2017: Destroyed (WannaCry, NotPetya).

• 2020-2021: Supply Chain Attacks (SolarWinds, Log4j).

• 2023-Present: Attacks on Cloud and Identity (Snowflake, MOVEit).