Acronis Tackling the Surge in Cyber Threats in the UAE

Tech News Middle East is delighted to share an insightful interview with Ziad Nasr, General Manager for the MEA region for Acronis. In the interview, he discusses the rise of cyber threats in the UAE driven by increased digital transformation and sophisticated attack techniques. He highlights the factors contributing to the surge in malware and URL-based threats in 2024, including the integration of emerging technologies, lack of cyber awareness, and geopolitical tensions.

Nasr also addresses the ongoing risks from ransomware, phishing, and insider threats, emphasizing the need for businesses to implement proactive cybersecurity strategies, such as AI-powered monitoring and vulnerability assessments. He shares valuable lessons learned from recent cyberattacks in the telecom sector and explains how Acronis is evolving its solutions to protect against AI-driven cyber threats through localized support and advanced technologies.

Here is the full interview transcript:

 1. With malware and URL-based threats on the rise in 2024, what are the main factors contributing to the increase in cyber threats in the UAE?

As industries and entrepreneurs across the UAE and the broader Middle East embrace digital innovations, the region is experiencing a surge in cyber-attacks. The cybersecurity landscape in the UAE is facing unprecedented challenges with malware detections soaring by 65.3% and URL-based threats increasing by 36.9% in 2024 according to Acronis Threat Research Unit data.

Several key factors contribute to this alarming trend:

• Increased Digital Transformation & Internet Usage: As businesses and government entities accelerate their digital transformation efforts, they often overlook critical security measures, making them more vulnerable to attacks. The integration of IoT devices and other emerging technologies also introduces additional vulnerabilities that attackers can exploit.
• Sophisticated Attack Techniques: Cybercriminals are employing more advanced techniques, including AI-driven attacks and social engineering
• Lack of Cyber Awareness: The gap between knowledge and behavior is stark. Data from the National Cybersecurity Alliance shows that younger users—particularly Gen Z and millennials—often fall victim to cybercrime at higher rates than older generations, despite having access to cybersecurity training.
• Geopolitical Tensions: Growing regional and global tensions can lead to state-sponsored cyber activities, targeting critical infrastructure and organizations within the UAE.

 As a result of the increasing volume and complexities of cyber threats, we are committed to staying ahead of the competition in the ecosystem and providing customized solutions for our clients.

2. Ransomware attacks have decreased slightly, but they remain a significant threat. What are some of the hidden risks companies may still face, even when the numbers appear to be lower?

Ransomware has become more sophisticated, targeting both large and small organizations. Attackers encrypt critical data and demand payment for its release. The rise of “double extortion” tactics, where attackers also threaten to leak sensitive data, has made this threat particularly severe. Despite a slight decrease in ransomware detections, the potential risks remain high, suggesting many organizations could still be vulnerable.

Cybercriminals increasingly target third-party vendors and suppliers to gain access to larger organizations. The SolarWinds attack is a notable example, where attackers compromised a widely used software update, leading to breaches across multiple industries.

Despite awareness, phishing remains a top threat, with attackers using increasingly convincing tactics to trick employees into disclosing sensitive information or downloading malicious software. Spear phishing, where attacks are highly targeted, is particularly dangerous.

Additionally, insider threats — whether malicious or accidental — pose significant risks. Employees or contractors with access to sensitive data can cause substantial harm through mishandling or intentional misuse of information.

3. What lessons can be learned from recent cyberattacks on the telecom sector, and how can businesses better protect themselves from similar breaches?

These incidents underscore the urgent need for stronger cybersecurity measures across businesses. Implementing a comprehensive cyber protection solution is essential, as it should effectively address both known and unknown ransomware strains while also protecting against various other threats. Key features to consider include vulnerability assessment and patch management, which involve regularly assessing and patching endpoints to prepare for potential attacks; predictive AI-based monitoring, which utilizes advanced technologies to proactively detect and respond to threats; and exploit prevention, which implements tools designed to thwart the exploitation of vulnerabilities. Acronis Cyber Protect Cloud incorporates these integral elements, ensuring robust protection for businesses. However, it’s important to complement security software with a culture of cyber protection awareness, as fostering this culture is crucial in effectively combating cyber threats.

4. How should government organizations and businesses in the UAE prioritize their cybersecurity strategies to defend against evolving threats like data extortion and sophisticated AI-driven attacks?

In today’s rapidly evolving digital landscape, government organizations and businesses in the UAE must take a proactive approach to cybersecurity to defend against increasingly sophisticated threats like data extortion and AI-driven attacks. A critical first step is prioritizing offsite (cloud) data backup as a safeguard against ransomware and data extortion, ensuring that sensitive information is protected and recoverable even in the event of a breach.

Equally important is adopting a robust, AI-powered cybersecurity protection suite that includes advanced tools like EDR (Endpoint Detection and Response) and XDR (Extended Detection and Response). These technologies offer real-time threat detection and rapid response, enabling organizations to stay ahead of fast-evolving attacks. AI-powered protection is essential, as it provides the agility needed to counter the constantly shifting tactics of malware and cybercriminals.

In addition to technical defenses, organizations should focus on building an information curation service that keeps key stakeholders informed about the latest developments in the cybersecurity threat landscape. By validating information sources and combating AI-generated misinformation, businesses can ensure that decision-makers are equipped with accurate, actionable insights to maintain a strong security posture.

5. Given the rise of sophisticated AI-based cyberattacks, how is Acronis evolving its cybersecurity solutions to combat new forms of spear phishing and data extortion attacks in the UAE?

We are integrating AI and machine learning in the solutions, expanding data center network, and providing scalable localized services to enhance resilience against sophisticated attacks. The launch of Cyber Cloud Data Center in the UAE underscores our dedication to providing localized support and infrastructure to our partners and customers in the region. Globally, our initiatives focus on empowering partners with access to cutting-edge cyber protection solutions, fostering innovation while ensuring data sovereignty.