Cyber Extortion: AI-Driven Attacks Put New Zealand in Crisis

As cyber threats surge in New Zealand, businesses face an alarming rise in cyber extortion, particularly through phishing and malvertising. You might think your organization is safe, but nearly 60% of businesses experienced a cyber attack in 2024. Phishing remains the primary entry point for these attacks, with 43% of incidents starting from deceptive emails. The statistics paint a dire picture: a staggering 21% increase in extortion-based emails between October and December 2024 signals that hackers are ramping up their tactics.

As cyber extortion escalates in New Zealand, nearly 60% of businesses faced attacks in 2024, primarily through phishing.

The rise of social media platforms like Facebook, YouTube, and Telegram has made it easier for cybercriminals to launch scams. In fact, Facebook alone accounted for 56% of reported threats. These platforms serve as a breeding ground for malicious activities, turning them into effective tools for extortionists. With stolen data at their disposal, hackers can pressure businesses into paying ransoms, and one in ten companies did just that after being attacked.

You may also be concerned about the role of artificial intelligence in these evolving threats. AI has made it cheaper and quicker for cybercriminals to craft sophisticated phishing campaigns, leading to highly personalized messages that are tougher to spot. Although AI-generated attacks only made up 6% of incidents in New Zealand, the potential for misuse is alarming. The proliferation of AI tools without proper guidelines raises the risk of employees inadvertently compromising sensitive company data. Furthermore, phishing attempts in New Zealand exceed global averages, highlighting the urgent need for heightened awareness.

Malvertising, often paired with phishing tactics, poses another significant threat. Cyber extortionists use deceptive ads to lure victims into traps, making it essential for you to remain vigilant. Coinminer threats surged by an astonishing 157% in Q4 2024, further complicating the landscape of cyber extortion.

Mobile security risks are on the rise as well, with malware like DroidBot and ToxicPanda targeting banking and cryptocurrency credentials. These threats exploit the widespread use of mobile devices, making it crucial for you to implement stronger protections.

New Zealand's legislative gaps exacerbate the situation, as there's no mandatory reporting of cyber incidents, unlike in Australia. This lack of accountability can hinder your organization's ability to respond effectively to these threats. With guidance instead of enforceable legislation, the urgency for comprehensive cyber protection has never been more critical.

You must remain proactive, fortifying your defenses against the relentless tide of cyber extortion.