Cyber attack trends 2023 to watch: expect more hits on 5G devices, new tricks to get around two-step login, scams tied to major news, a jump in text-based “smishing,” and sharper phishing powered by AI—so tighten device firmware checks, strengthen sign-in steps, and add mobile protections.
As you plan for 2023, don’t forget resilience. Many business leaders already feel the pressure—68% say cyber risks are getting worse, and with good reason. Attacks keep getting more advanced and are often run by organized groups that operate like a business. In fact, the average number of global attacks rose 15.1% in 2021.
Knowing which tactics are growing helps you adjust your defenses—before something disrupts work at your office in Panama City or anywhere across Bay County. Here’s what to keep on your radar.
The cyber attack trends 2023 to watch
5G devices are in the crosshairs
5G is finally delivering fast connections, and that attracts attackers. Criminals are probing the 5G hardware inside routers, mobile phones, and even PCs for weak spots in firmware. New tech often has bugs, and hackers move quickly to exploit them.
What to do: when you buy 5G-capable gear, ask about firmware security, how updates are delivered, and how long the manufacturer supports the device. Choose vendors with a clear patch process.
Getting around two-step login (OTP bypass)
Two-step login (multi-factor authentication) blocks many break-ins, even if someone steals a password. That’s why crooks now target the one-time passcodes (OTPs) themselves. Common tricks include:
- Replaying a recent code: capturing an OTP and trying to use it again before it expires.
- Code swapping: generating an OTP on their own account, then attempting to use that unused code on a different account.
- Leaked tokens: pulling OTPs exposed by a vulnerable web app.
- Phony password resets: using phishing to trigger a reset and then convincing the user to share the texted or emailed OTP.
Reduce risk with phishing-resistant methods where available, watch for unexpected reset prompts, and train staff to never share codes.
Scams tied to major news and disasters
Criminals exploit crises. During the pandemic, cybercrime volume jumped by about 600%. Expect waves of phishing during hurricanes, conflicts, and other headline events. These lures lean on emotion—sad images, urgent requests, and appeals for donations—to lower defenses.
Slow down on messages tied to breaking news. Verify requests through official sites or known contacts before clicking or giving.
Smishing and other mobile threats
Our phones are always with us, so attackers go there. Text-based phishing (smishing) is rising as phone numbers are easy to buy in bulk. Messages often look like delivery updates or receipts. One tap can hand over account access or install malware.
Mobile malware is climbing fast—early 2022 saw a 500% increase in attacks targeting smartphones. Protect devices with reputable mobile anti-malware, keep OS and apps updated, and consider a DNS filter to block risky links before they load.
Phishing gets a boost from AI
Many phishing emails no longer scream “fake.” With AI and machine learning, criminals can copy real brand styles and tailor messages to individual roles. That means fewer typos, better graphics, and more convincing stories—sent at scale.
Defense basics still work: security awareness training, safe-by-default email settings, and layered controls that flag suspicious senders and links.
Want a second set of eyes on your defenses for 2023? Flux Labs can help you review risks and tighten protections across your computers and devices—get in touch.
