Skip to content

ESET Research discovers espionage apps on the attack in Pakistan, utilizing romance scams

  • ESET Research discovered a new cyberespionage campaign that, with a high level of confidence, ESET attributes to the Patchwork APT group.
  • The campaign leveraged Google Play to distribute six malicious apps bundled with VajraSpy RAT code; six more were distributed in the wild.
  • The apps on Google Play reached over 1,400 installs and are still available on alternative app stores.
  • Patchwork probably used a honey-trap romance scam to lure their victims into installing the malware.

BRATISLAVA, MONTREAL — February 1, 2024 — ESET researchers have identified 12 Android espionage apps that share the same malicious code; six were available on Google Play. All the observed applications were advertised as messaging tools, apart from one that posed as a news app. In the background, these apps covertly execute remote access trojan (RAT) code called VajraSpy, used for targeted espionage by the Patchwork APT group. The campaign mostly targeted users in Pakistan. Based on ESET’s investigation, the threat actors behind the trojanized apps probably used a honey-trap romance scam to lure their victims into installing the malware.

VajraSpy has a range of espionage functionalities that can be expanded based on the permissions granted to the app bundled with its code. It steals contacts, files, call logs, and SMS messages, but some of its implementations can even extract WhatsApp and Signal messages, record phone calls, and take pictures with the camera.

Based on available numbers, the malicious apps that used to be available on Google Play were downloaded more than 1,400 times. During the ESET investigation, weak operational security of one of the apps led to some victim data being exposed, which allowed researchers to geolocate 148 compromised devices in Pakistan and India. These were likely the actual targets of the attacks. ESET is a member of the App Defense Alliance and an active partner in the malware mitigation program, which aims to quickly find Potentially Harmful Applications and stop them before they ever make it onto Google Play. As a Google App Defense Alliance partner, ESET identified the malicious apps and reported them to Google, and they are no longer available on the Play store. However, the apps are still available on alternative app stores.

Last year, ESET detected a trojanized news app called Rafaqat being used to steal user information. Further research has uncovered several more applications with the same malicious code. In total, ESET analyzed 12 trojanized apps, six of which (including Rafaqat) had been available on Google Play, and six found in the wild – in the VirusTotal database. These apps had various names, such as Privee Talk, MeetMe, Let’s Chat, Quick Chat, Rafaqat, Chit Chat, YohooTalk, TikTalk, Hello Chat, Nidus, GlowChat, and Wave Chat.

To entice their victims, the threat actors likely used targeted honey-trap romance scams, initially contacting the victims on another platform and then convincing them to switch to a trojanized chat application. “Cybercriminals wield social engineering as a powerful weapon. We strongly recommend against clicking any links to download an application that are sent in a chat conversation. It can be hard to stay immune to spurious romantic advances, but it pays off to always be vigilant,” advises ESET researcher Lukáš Štefanko, who discovered this Android spyware.
According to the MITRE ATT&CK database, Patchwork has not been definitively attributed and only circumstantial evidence suggests the group may be a pro-Indian or Indian entity. This APT group targets mostly diplomatic and government entities.

For more technical information about VajraSpy and the spying apps from the Patchwork APT group, check out the blog post “VajraSpy: A Patchwork of espionage apps” on WeLiveSecurity.com. Make sure to follow ESET Research on X (formerly known as Twitter) for the latest news from ESET Research.

Timeline showing the dates when the trojanized apps became available 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

AR vs VR: What’s the difference?

It would seem like the line between science fiction and reality is increasingly blurred. We no longer see this only in the movies and games, but in e-commerce, education, entertainment, staff training, remote diagnostics or architectural projects. Today Virtual Reality and Augmented Reality are changing the way we use screens by creating new, more interactive and immersive experiences. But… How do we define Virtual Reality and Augmented Reality?

Content:

Virtual Reality or VR refers to an artificial environment created with hardware and software, presented to the user in such a way that it looks and feels like a real environment. To “enter” a virtual reality, the user puts on gloves, headphones and special glasses, from which information is received from the computer system. In addition to providing sensory input to the user (three of the five senses: touch, hearing, and vision), the devices also monitor the user’s actions.

For Augmented Reality or AR), technology capable of inserting digital elements into real-world environments is used to offer customers and professionals a hybrid experience of reality. Although Augmented Reality is compatible with multiple devices, it is more popular for smartphone applications, with real-time interactions. In fact, most current AR tools are customer-oriented, although organizations are beginning to embrace AR in business processes, products, and services.

While AR is different from VR, both innovations represent a field of technology called extended reality (XR), encompassing all environments, real and virtual, represented by computer graphics or mobile devices. The goal of XR is to combine physical and virtual realities until users are unable to differentiate them, in addition to being available to anyone to improve their lives.

The importance of understanding each reality (AR and VR) is the potential to alter the digital landscape in life and business, transforming the way we communicate and interact with information and changing the way multiple industries can operate. We look at this in more detail below.

Augmented Reality (AR)

This reality incorporates virtual content into the physical world to improve user perception and interaction with a real environment. AR is experienced with smartphones, tablets or AR glasses, which project virtual objects, text or images so that users can interact simultaneously with virtual and physical elements.

For example, a camera on the device records the user’s environment and gyroscopes and accelerometers monitor the camera’s orientation and location. The AR software analyzes the camera’s transmission, which identifies objects and features in the environment. From there, users may interact with virtual objects using touchscreens, gestures, and voice commands. For example: from a Tablet, you may check suggestions for those who visit a city. The screen shows places to shop, eat, visit a museum, etc., based on the user’s preferences.

On the production floor of a manufacturing company, through AR lenses and software, maintenance engineers can obtain information on the health status of a piece of equipment, so that they can make decisions in real time and more proactively.

Another example can be seen in the design of spaces and architecture. From a lens you may get an image of what the completed project would look like to present the executive project to investors or detect improvements in the design and/or impact on the environment.

Operation and example of Virtual Reality (VR)

Within Extended Reality, virtual reality is the most popular form. Users wear headsets or virtual reality goggles (wearables) that have sensors to track movements and allow them to explore computer-generated virtual environments, as well as to interact with objects and participate in different activities displayed on screens or lenses.

In VR, users see three-dimensional (3D) images that create the feeling of depth and immersion, while spatial audio enhances the experience through headphones or speakers. We must also understand that the immersive experience is a format whose goal is to completely “immerse” the person in a specific real or virtual environment or context.

One of the most widespread applications of VR is in games, in which users interact directly with the game through devices such as glasses, belts, gloves and other accessories that improve player experience.

In industries, VR can support design and training with elements that could be risky for the operator in an induction stage. Risks are also reduced in product design or construction and architecture analysis.

In the field of health, VR has contributed to improvements in the diagnosis of both physical and mental illnesses, training of medical personnel, application of telemedicine, patient education about their condition, or a new approach to recovery or rehabilitation therapies (which transfers the mechanics of games to the educational-professional field). A very important thing in VR is that immersive content is as important as the hardware from which the user has interactions. Without hardware, there is no “simulated environment” that can be brought to life.

To arrive at what we understand today as VR, in 1961, what is considered the first virtual reality helmet was built (by scientists Corneau and Bryan), based on a system of magnetic sensors, incorporating the elements of virtual reality: isolation, freedom of perspective and an immersive sensory experience. A year later, Morton Heilig presented the Sensorama, which reproduced audiovisual content. Users fitted their heads into a device specially designed to live a three-dimensional experience where even odors were reproduced. It was a mechanical device, predating digital electronics. In 1965, Ivan Shuterland, laid the foundations of a multi-sensory system based on a computer. In 1968, Shutherland created the first head-mounted display (HMD) for use in immersive simulations. The graphs that comprised the virtual environment the user was in consisted of simple model rooms rendered from the wireframe algorithm (a visual representation of what users will see and interact with). This device was called The Sword of Damocles (the helmet was so large that it needed to be suspended from the ceiling).

Over time, advances were made, until in the 80s and 90s, the game companies Sega and Nintendo developed virtual reality game systems. In 2009, the Oculus Rift glasses emerged in a project by Palmer Luckey, to develop devices in the video game industry. Until the 2010s, the Oculus and HTC Vive companies introduced high-quality virtual reality headsets, being able to take advantage of powerful graphics and motion tracking technology. Recently, Apple, with Vision Pro, and Meta, with Oculus Go headphones, have generated great expectations about the use of VR.

As for the origins of AR, in 1974, Myron Kruger, a computer scientist and artist, built a lab at the University of Connecticut called ‘Videoplace’ that was entirely dedicated to artificial reality. Within these walls, projection and camera technology were used to cast on-screen silhouettes surrounding users for an interactive experience. Then, AR came out of the labs for use in different industries and commercial applications. In 1990, Tom Caudell, a researcher at Boeing, coined the term “augmented reality”. In 1992, Louis Rosenburg, a researcher at the USAF’s Armstrong’s Research Lab, created “Virtual Fixtures,” which was one of the first fully functional augmented reality systems. The system allowed military personnel to virtually control and guide machinery to perform tasks such as training their U.S. Air Force pilots in safer flying practices.

In 1994, Julie Martin, a writer and producer, brought augmented reality to the entertainment industry with the stage production Dancing in Cyberspace. The show featured acrobats dancing alongside virtual objects projected onto the physical stage.

In 1998, Sportsvision broadcasted the first NFL game live with the 1st & Ten virtual graphics system, also known as the yellow yard marker. The technology showed a yellow line overlaid on top of the transmission so you could quickly see where the team advanced to get a first try. In 1999, NASA created a hybrid synthetic vision system for its X-38 spacecraft. The system leveraged AR technology to help provide better navigation during test flights.

From those years to the present, AR has been widely adopted in various fields such as entertainment, industrial, personnel and design: Esquire magazine used augmented reality (2009) in print media for the first time in an attempt to bring the pages to life. When readers scanned the cover, the augmented reality-equipped magazine showed Robert Downey Jr. talking to readers. Volkswagen introduced the MARTA (Mobile Augmented Reality Technical Assistance) app in 2013, which mainly provided technicians with step-by-step repair instructions within the service manual. Google introduced Google Glass, which is a pair of augmented reality glasses for immersive experiences. Users with AR technology communicated with the Internet through natural language processing commands, being able to access a variety of applications such as Google Maps, Google+, Gmail and others. In 2016, Microsoft introduced HoloLens, which is a headset that runs on Windows 10 and is essentially a wearable computer that allows users to scan their environment and create their own AR experiences. In 2017, IKEA launched its augmented reality app called IKEA Place that changed the retail industry forever. The app allows customers to get a virtual preview of their home décor options before making a purchase.

Similarities and Differences between AR and VR

As we have seen, AR and VR are quite similar and offer virtual objects in real life. Their similarities can be summarized like this:

  • They can display enlarged and life-size objects and use the same devices.
  • 3D content is needed.
  • They can be used on laptops, PCs, smartphones, etc.
  • They include tracking of movement of hands, eyes, fingers and more.
  • Inmersion is offered.

However, there are differences that we can summarize as follows:

Augmented RealityVirtual Reality
It uses a real-world scenario to add a virtual item or object that can be viewed through a lens. AR augments the real-world sceneEverything is completely virtual, even the environment. VR is a fully immersive virtual environment
Users can control their minds and their presence in the real world. Users can feel their own presence along with virtual objects.VR systems guide users in the virtual environment. Visual senses are controlled by the system. Only objects, sounds, etc., of the image can be perceived in your view
The user can access AR on their smartphone, laptop or tablet.To access virtual reality, you need a headset.
AR enhances the virtual and real world and simplifies your work. In AR, the virtual world is 25% and the real world is 75%VR enhances fictional reality. In VR, the virtual world is 75% and the real world is 25%
AR requires higher bandwidth, around 100 Mbps.Virtual reality can work at low speeds. About 50 Mbps connection is required.
Audience: for those who need to add virtuality to the real world and improve both the virtual and real worlds. AR detects user locations and bookmarks, as well as system calls in predefined content. It is partially immersive and open.Audience: for those who need to replace all reality and improve virtual reality for many purposes, such as games, marketing, etc. VR is an immersive sequence of animations, URLs, videos, audio. VR is fully immersive and closed

As for the audiences for which each one is focused, AR is for those who need to add virtuality to the real world and improve both the virtual and real world. AR detects user locations and bookmarks, as well as system calls in predefined content. It is partially immersive and open. While VR is for those who need to replace the whole reality and improve virtual reality for many purposes, such as games, marketing, etc. taking into account that VR is an immersive sequence of animations, URLs, videos, audio. VR is fully immersive and closed.

Examples of AR and VR Applications

Some examples of how organizations have adopted AR are:

  • Development of translation applications. These applications interpret text, which is scanned, from one language to another.
  • In the gaming industry, to develop real-time 3D graphics.
  • Analysis and recognition of an item or text. Example: With image capture using Google Lens, the app will start analyzing the image and recognize what it is about. Once done, it will offer you actions to perform related to the type of item or text.
  • In advertising and printing, AR is used to display digital content at the top of magazines.
  • In design, as we mentioned in the IKEA Place example, AR provides a virtual preview of decoration options before making a purchase. Another example is YouCam Makeup, a free application that allows you to design and create makeup styles, hairstyles, face and body touch-ups with filters, dyes, eyelashes, among others.

VR has gained momentum in several industries, such as:

  • The Armed Forces using virtual reality technology to train their soldiers by showing flight and battlefield simulations.
  • Medical students learning better with 3D scanning of each organ or the entire body with the help of VR technology.
  • Virtual reality being also used to treat post-traumatic stress, phobias, or anxiety by making patients understand the real cause of their illness and in other healthcare settings.
  • Professionals using virtual reality to measure an athlete’s performance and analyze techniques with the digital training device.
  • Virtual reality-based devices (Oculus Rift, HTC Vive, google cartoon, etc.) helping users imagine an environment that doesn’t exactly exist, such as an immersive experience in the world of dinosaurs.
  • From manufacturing and packaging to interior design, companies can use virtual reality to give customers a demo of the product and a better understanding of what goes into making it. An example is Lowe’s Holoroom, where customers can select home décor items, appliances, cabinets, and room designs to see the end result.
  • This approach can also be implemented to engage both customers and employees, driving inspiration, collaboration, and interactions. For example, in personal banking, some benefits or rewards can be offered to loyal customers.
  • In the specific experience of a particular product, VR makes it possible to highlight its most exclusive features and at the same time provide the opportunity to experience its use. Vehicle manufacturer Volvo used virtual reality technology implementation to help customers who did not have easy access to their dealerships to test their cars. This experience was provided through the use of the Google Cardboard VR headset.

Using AR on Mobile Devices

At first, it seemed that AR would be intended only for military applications or games, but today we see that they play an important role in innovation in the mobile market, allowing users of smartphones and tablets to interact virtually with their environment thanks to greater bandwidth and better connectivity. In the words of Mark Donovan, analyst at ComScore, “…The idea that a mobile device knows where I am and can access, manipulate, and overlay that information on real images that are right in front of me really gets my sci-fi juices flowing…This is just getting started and will probably be one of the most interesting mobile trends in years to come.”.

A major factor in the mobile market is GPS and location-based technologies, which allow users to track and find friends while traveling or “check in” at particular locations. That information is stored and shared with others through the internet cloud and can be used so that marketers can use it to publicize special promotions or discounts, or a city promoting its hotspots could embed facts on the screen and about the neighborhood and the people who lived there. Other visitors may leave virtual comments about the tour. In education, biology students, for example, could use an augmented reality app and a smartphone to gain additional insight into what they see while dissecting a frog.

The way smartphones are driving AR usage, Qualcomm recently showcased augmented reality technology on its devices. Qualcomm’s Snapdragon processors and a new Android smartphone software development kit have been designed to provide the necessary foundation in building and using augmented reality technology in mobile phones. With toy maker Mattel, they collaborated on the virtual update of a classic game called Rock ‘Em Sock ‘Em Robots. Using Qualcomm technology and the smartphone’s built-in camera, players could see virtual robots superimposed on their smartphone screens. The robots appeared in the ring, which was a piece of paper printed with the static image of the ring and its strings. Players used the buttons on their phones to throw punches and their robots moved around the ring while players physically surrounded the table where the image of the ring was placed. The company also sees the potential in marketing, as an example it mentions the insertion of animated coupons on top of real images of its products in stores, so that, when consumers pass by a cereal box, for example, in the supermarket and look at their phone screen, they can get an instant discount.

Now, what is needed for AR on mobile devices? You need a real image capture device, software that is simultaneously transcribing this information and the virtual elements that are going to transform that reality. There are also different types of augmented reality: the one that is transcribed through a geolocation and the one that is based on markers:

  • AR Projection: Artificial light is projected onto real-world surfaces. Augmented reality applications can also detect the tactile interaction of this projected light. This way, user interaction is detected by an altered projection on the expected projection.
  • Overlay of the AR: Before the overlay, the application must recognize which element it has to replace. Once achieved, an object is partially or totally superimposed.
  • AR Markers: Using a camera or a visual marker (a QR, for example), a marker is distinguished from any other real-world object. This way, information is superimposed on the marker.
  • Geolocation of AR: It is based on the geolocation emitted by the smartphone through GPS to know its position and location.
  • Devices for AR: In AR it is necessary to have sensors and cameras. The projector, usually a very small one, allows you to project reality in any space without using a mobile phone or tablet to interact. Glasses or mirrors also use augmented reality.

There are also 2 types of sensors:

  • Sensors used for Tracking: They are responsible for knowing the position of the real world, users and any device in the solution. That way it is possible to achieve that synchronization or registration between the real and virtual world that we discussed when giving the definition of augmented reality. In turn, these sensors are classified into:
    • Camera (computer vision): Perhaps one of the most important technologies. There are also the ‘fiducial markers’, that is, marks in the environment that allow the vision system and the solution as a whole, not only to be aware of what is there and what its performance is like, but also to place it spatially.
    • Positioning (GPS): A technology not very specific to augmented reality but also sometimes used for spatial positioning.
    • Gyroscopes, accelerometers, compasses and others: Which allow you to appreciate the orientation (gyroscopes), direction (compasses) and acceleration (accelerometers). Most of these sensors are already incorporated, for example, in mobiles and tablets.
  • Sensors to collect information from the environment: Humidity, temperature and other atmospheric information. Another type of possible information is pH, electrical voltage, radio frequency, etc.
  • Sensors to collect user input: These are fairly common devices such as buttons, touch screens, keyboards, etc.

Cinematic Influences on Public Perception of VR and AR

Undoubtedly, cinema has been one of the factors that have influenced the perception of Virtual Reality and Augmented Reality. As an example, we have these well-known films where these technologies played a leading role:

  • Iron Man: This film is a great example of how military forces can use technology in the field using information fed by a central computer.
  • They Live: It is the story of a drifter who discovers a pair of glasses that allow him to see the reality of aliens taking over the Earth. The whole concept of putting on glasses to see what others can’t is the big idea behind AR.
  • Minority Report: Futuristic sci-fi film set in 2054, filled with AR technology from start to finish. From the computer interface that appears in the air to the interaction with a 3D computerized board and the ads that offer what the user would like to have.
  • Avatar: The main character, Jake Sulley, is on a huge AR device that allows his host to experience a completely different level of sensory perception.
  • Robocop: Detroit officer Alex Murphy becomes Robocop. His helmet is connected to the most advanced augmented reality technology that allows him to continue fulfilling his role as a police officer, albeit at a more impressive level.
  • Wall-e: futuristic 3D animated film. This film somehow made a subtle statement that AR technology is not just for law enforcement use.
  • Top Gun: The HUDs found in the cockpits of the F-14 Tomcats used in the film are the real reason they are called HUDs. These things allowed pilots to keep their heads up in the heat of the action and not look at their instrument panels.
  • Tron/Tron: Legacy: Legacy – These two films delve into what could happen if you were unexpectedly thrown into a video game. Although for many passionate gamers it may seem like a dream come true, the movies quickly prove that it is not without its drawbacks.
  • Virtuosity: This film poses what could happen if a virtual reality character were placed in our reality. There is a virtual reality simulation built by combining the characters of multiple serial killers that makes its way into reality.
  • Matrix: It examines a world dominated by human-created machines, combining action sequences with innovative special effects. Unlike Skynet in the Terminator trilogy, which aimed to annihilate humanity, the artificial intelligence in Matrix has discovered a more useful purpose for our species: energy. Machines do this by absorbing energy from bodies while keeping people entertained in a virtual reality realm known as Matrix.
  • Gamer: In the film, users control death row convicts in real life in the Internet Slayers game. Gerard Butler plays one of these convicts and, in order to get released, he must survive the game with the help of the person who controls it. It is an intense and visceral experience that explores the border between virtual and genuine violence.
  • Ender’s game: It portrays a society where children are educated to be military soldiers through virtual reality simulations. It’s a depressing concept countered with vivid and extremely beautiful images, particularly in the recreated landscapes.
  • Ready Player One: It chronicles how virtual reality has changed cultural conventions thanks to a new technology called Oasis. Although it started as a video game platform, Oasis has expanded into a way of life. People work in the Oasis, children go to school there, and companies try to monetize every square inch of the Oasis. In the game, the winner receives Halliday’s enormous riches, as well as ownership of the Oasis.

In addition to representing the use of AR and VR, the films also raise aspects of ethics and governance as in all emerging technology.

Technological and Business Challenges

AR and VR are technologies that will be increasingly present in people’s daily lives and in the work of companies. Of course, there are challenges that organizations should consider when adopting them:

  • Excessive Expectations: It is often speculated that it is possible to execute in virtual environments absolutely all the actions that can be actually performed. It is important to carry out all the necessary procedures so that there is consistency between the virtual and the real world.
  • Specific development: Considering that the development of skills in specific fields and in regards to the needs of each organization must be carried out, with defined results from its design in the business model and where a positive impact is generated for the organization.
  • Limited resources: Understanding the current limitations in the development of better apps and learning items with AR and VR, from the necessary equipment, software and hardware, and the human talent that can develop and support the applications.
  • Technological gap: Reducing the educational-digital gap between institutions, regions and social sectors with access to AR and VR technology and those that do not yet have the same opportunities or technological capabilities.
  • Learning Curve: From the first business model where it is planned to integrate AR and VR and the organizational culture that allows the consistent and continuous development of these technologies.
  • Transdisciplinary aspects: AR and VR involve transdisciplinary aspects from different knowledge and business areas: information technologies, marketing, sales, operations, human resources, etc.
  • Accelerated change: Technology is very agile and the change of electronic devices that give life to this type of tools is updated at an accelerated speed, which triggers challenges in investments in technologies that support it and in the human talent that knows these technologies and that can implement them.

Another important aspect in the reality of many countries is that bandwidth and low latency requirements for these technologies that take up multimedia resources are at an insufficient level, in addition to the fact that current networks often cannot support high-quality AR and VR transmissions, perform high-speed data transmission, stable connection that gets rid of fluctuations and offers a seamless experience.

Future of Augmented and Virtual Reality

While AR and VR remain emerging technologies, faster, lighter and more affordable technology is envisioned in the future. On the one hand, advances in smartphone technology (with better cameras and processors) will mean that you can enjoy more innovative AR and VR experiences. The advancement in 5G wireless networks will also make it possible to enjoy these technologies from anywhere in the world.

Although this high technology is associated with science fiction and the gaming industry, Virtual Reality has the potential to revolutionize several industries, especially when looking for innovative ways to increase their productivity, improve processes and, as remoteness gains ground, the possibilities of virtual reality help achieve goals.

For VR, the development of more powerful processors such as Meta’s Oculus Quest and Apple’s 8KVR/AR headset is anticipated. As devices become more robust in functionality and lighter in use, the adoption of this technology will play an important role in creating more immersive and intuitive experiences in all fields.

We can also mention some predictions and budding improvements:

  • LiDAR will bring more realistic AR creations to our phones. iPhone 12 and iPad Pro are now equipped with LiDAR LiDAR (Light Detection and Ranging) technology is essentially used to create a 3D map of the environment, which can seriously improve the AR capabilities of a device. In addition, it provides a sense of depth to AR creations, rather than a flat graphic.
  • VR headsets will be smaller, lighter and incorporate more features. Hand detection and eye tracking are two prominent examples of the technology built into virtual reality headsets. Because hand detection allows VR users to control movements without clunky controllers, users can be more expressive in VR and connect with their VR game or experience on a deeper level. And the inclusion of eye-tracking technology allows the system to focus the best resolution and image quality only on the parts of the image the user is looking at (exactly as the human eye does). Delay and risk of nausea are reduced.
  • There will be new XR accessories to further deepen the experience. The startup Ekto VR has created robotic boots that provide the sensation of walking, to adapt to the movement in the headphones, even if you are actually standing. The rotating discs at the bottom of the boots move to match the direction of the user’s movements. In the future, accessories like this may be considered a normal part of the virtual reality experience.
  • We’ll even have full-body haptic suits. There are already haptic gloves that simulate the sensation of touch through vibrations. The full-body suit is proposed as the TESLASUIT, which today are not affordable for most virtual reality users. Over time they could reduce their cost which in turn will increase their adoption.

According to companies surveyed by PWC in 2022, VR learners absorb knowledge four times faster than learners in the classroom and are 275% more confident when it comes to applying the skills they learned during training in the real world.

In the workplace, remote work is more popular than ever, but there are still aspects of face-to-face interactions that are difficult to replicate. As a result, mixed reality collaborative work tools will increasingly leverage virtual reality and augmented reality to capture and express the more subtle aspects of interaction that are not translated into video calls.

In commerce, virtual reality and augmented reality will more often become part of the marketing and sales process. Brands will invest in creating virtual environments where they can interact with shoppers to help them solve their problems, encouraging them to make the leap from being customers to being loyal followers.

In health, from using AR to improve liver cancer therapy to creating surgery simulations in virtual reality, healthcare systems are using these technologies in a variety of applications. The development continues, due mostly to the growing demand driven by more connectivity, costs in devices that will be reduced and the need to reduce costs and risks in interventions.

According to Forbes, global investments in augmented reality are estimated to grow from $62.75 billion in 2023 to $1,109.71 billion by 2030, at a CAGR of 50.7%. For virtual reality, Forbes estimated that global investments in virtual reality (VR) reached $59.96 billion in 2022 and are expected to grow at a compound annual growth rate (CAGR) of 27.5% from 2023 to 2030. Undoubtedly, double-digit growth makes it clear that organizations must consider how to address these emerging technologies to achieve business results.

Conclusion

AR and VR are technologies that should be reviewed in the Digital Transformation strategy of organizations, for the advantages they represent, from the display for customers of outstanding product characteristics, the feasibility of a project or design; practical guides on the use of products, demonstrations, advertising or promotions; the training and development of staff skills on new equipment or security protocols through VR motivating interactive learning; the holding of virtual meetings or events that simulate the true presence of customers and colleagues; virtual visits to facilities, shops, educational institutions, museums, etc.; up to the best customer service, with a better approach saving time and resources.

Of course, the use of augmented reality and virtual reality depends on the internal capabilities, budget and objectives of the organization. Although there are already many applications on the market that use augmented reality, the technology has not yet become widespread; however, as devices, processors and software add more power and sophistication, the level of information that can be added will increase. AR and VR can help improve decision-making ability, communication, and understanding by experiencing a scenario that is artificial but looks and feels natural. As we have seen throughout this article, AR and VR have many applications in the entertainment, military, engineering, medical, industrial, and other industries. It is recommended, for best results, to combine both technologies by doing an analysis of each use case on adaptability, productivity, time to market, return on investment and expected results. It is also recommended to approach an information technology partner who has the expertise in your industry and understands your challenges.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About PandoraFMS
Pandora FMS is a flexible monitoring system, capable of monitoring devices, infrastructures, applications, services and business processes.
Of course, one of the things that Pandora FMS can control is the hard disks of your computers.

Seeing is believing: Quantified end-user experience benefits of using Parallels RAS for native RDS and AVD

It’s one thing to read about the benefits of using Parallels RAS for native Remote Desktop Services and Azure Virtual Desktop, but it’s quite another to experience its capabilities yourself.  

In this post, I’ll explain the benefits and capabilities of Parallels RAS as they relate to RDS and AVD. Read on to learn more and access your free trial here.

Measuring performance in remote sessions

Collecting telemetry data about the performance inside a remote session provides insights into the required CPU, memory, disk I/O usage, and resources. It does, however, not always provide insight into the actual user experience.

Being able to see the actual perceived end-user experience is what makes the difference. EUC Scores do exactly that by measuring and quantifying the perceived end user experience in remote and digital workspaces, both on-premises and in the cloud. They combine both telemetry data and the recorded user experience in a single view.

This blog post highlights two specific features of Parallels RAS that provide additional benefits and an enhanced end user experience —accelerating the enumeration of local files and folders based on Parallels RAS Accelerated File Retrieval and accelerating access to redirected printers with Parallels RAS Universal Printing.

Get your free trial of Parallels RAS now!

Introducing the EUC Score test methodology

The EUC Score involves a range of criteria. As described on EUCScore.com, the scores are compiled based on the following elements:

When interacting with virtual desktops or remote applications, there are several usability and performance aspects with significant relevance for most users: fast logon, short application load times, high refresh rate of the endpoint display, great graphics quality, unnoticeable user interface response time delays, support of all common media formats, and high session reliability. Only systems that come close to this ideal allow users to naturally emerge into the digital workspace through a range of endpoint devices with different capabilities and form factors.” EUCScore.com

Benny Tritsch, Parallels VIPP and owner of EUCScore has conducted a series of tests to compare the perceived end-user experience of Parallels RAS (Remote Application Server) with the Native Remote Desktop Services (RDS) and the native Azure Virtual Desktop (AVD) experience.

The Parallels RAS performance tests performed

This series of tests covers the user experience when accessing local files and folders from within a remote session and accessing local printers from within a remote session.

The sessions were conducted with Parallels RAS features enabled and without Parallels RAS features enabled (creating an experience similar to native Remote Desktop Services (RDS) and Azure Virtual Desktop (AVD)).

All tests were conducted using a session host server running in Azure based on Standard_D2s_v5 size, which contains 2 vCPU, 8Gb memory, and a 128Gb disk based on Premium SSD.

Accelerating enumeration of local files and folders

Parallels RAS includes a feature called Accelerated File Retrieval, which significantly speeds up the enumeration of local files and folders. This feature optimizes communication (compared to standard RDP) and adds caching of the folder structure.

This optimization applies to both the Parallels Client for Windows and the Parallels Client for macOS. It also applies to published desktops and published applications in both single-session and multi-session modes.

Parallels RAS makes access to local files 60 times faster

As I mentioned in the introduction, seeing the actual differences in the perceived end user experience is what makes test results and telemetry data come to life. The results of this test were visibly clear.

Without Parallels RAS Accelerated File retrieval, the user must wait over 60 seconds before getting proper access to all content inside folders stored on the local client.

With Parallels RAS Accelerated File retrieval, however, the same process takes about a second to complete.

Beyond the user experience, Parallels RAS Accelerated File retrieval can also enable higher user densities because fewer resources are consumed by the same user actions. When using a public cloud provider like Azure, it allows organizations to save on cloud consumption costs.

The EUC Score visualizer shows the results of these tests in an easy-to-understand, logical way by presenting the perceived end-user experience alongside telemetry data and recorded user activity, including options to zoom into specific quadrants and open side-by-side comparisons.

The screenshot below shows the EUC Score visualizer in action.

Accelerated file retrieval

The table below contains links to all interactive test results published on eucscore.com.

Accessing local files and folders
User experience with Accelerated File Retrieval
User experience without Accelerated File Retrieval (similar to RDS or Azure Virtual Desktop experience)
Side-by-side comparison

Parallels RAS Accelerated File Retrieval vs the native RDS and AVD experience

The test results show that when comparing the native Remote Desktop Services (RDS) or Azure Virtual Desktop (AVD) experience with Parallels RAS Accelerated File Retrieval, Parallels RAS clearly wins.

Some key takeaways include:

  • Local files and folders are enumerated 60 times faster
  • On average, the CPU Queue length is 50% less
  • On average, the required disk IOPS is 25% less

More information on Accelerated File Retrieval and other user experience enhancements built into Parallels RAS can be found in this blog post.

Accelerated access to redirected printers

Parallels RAS offers Universal Printing technology, a comprehensive way of dealing with printing in remote sessions. It is designed to enhance the printing experience in virtualized and remote environments.

Some of its features include compression, multi-functional support, increased performance, and an optimized user experience. This test specifically measures the time it takes to get access to redirected printers upon reconnecting to a disconnected session, a very common scenario when dealing with published applications and desktops.

Parallels RAS makes access to redirected printers five times faster

I’ve established that to answer the question of whether a feature makes a noticeable difference in accelerating a specific action for the end user, investigating the perceived user experience is key. The result of a test of the printing features shows a significant difference in perceived user experience.

Without Parallels RAS Universal Printing getting access to eight printers takes 16 seconds upon reconnecting. With Parallels RAS Universal Printing, that same action takes less than three seconds.

In the scenario with Parallels RAS Universal Printing, fewer resources are consumed, which can lead to less user density and ultimately cost savings.

Beyond these aspects, Parallels RAS Universal Printing also overcomes issues in certain scenarios where third-party applications require printers to be available before launch. This scenario may result in specific third-party applications failing to launch or require a restart once the local printers are redirected again. Such occurrences significantly affect the overall user experience as perceived by end users.

The EUC Score visualizer presents this result comprehensively by showing the perceived end user experience alongside telemetry data and recorded user activity, including options to zoom into specific quadrants and open side-by-side comparisons.

The screenshot below shows the EUC Score visualizer in action.

Universal Printing user experience

The table below contains links to all interactive test results gathered and published on eucscore.com.

Accessing local printers
User experience with Parallels RAS Universal Printing
User experience without Parallels RAS Universal Printing (similar to RDS or Azure Virtual Desktop experience)
Side-by-side comparison

Parallels RAS Universal Printing vs the native RDS and AVD experience

The test results show that when comparing the native Remote Desktop Services (RDS) or Azure Virtual Desktop (AVD) experience with Parallels RAS Universal Printing, Parallels RAS clearly wins.

With Parallels RAS:

  • Printers are reconnected 2 times faster.
  • The peaks in disk read bytes are 89% lower
  • The peaks in disk write bytes are 27% lower
  • The peaks in disk IOPS are 82% lower

More information on this and all the other enhancements that Parallels RAS Universal Printing provides can be found in this blog post and by watching this video.

Take advantage of these and many other features included in Parallels RAS to enhance the user experience of virtual applications and desktops through a unified workspace.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

A CISO’s Guide to Balancing Cybersecurity and Productivity

The role of a Chief Information Security Officer (CISO) has rapidly evolved in recent years. CISOs are now tasked with protecting the business from emerging cyber threats while ensuring that productivity is not adversely impacted. Finding the balance between these seemingly opposing objectives can be challenging. However, by implementing a strategic approach that blends awareness, streamlined measures, robust access controls, incident response preparedness, and judicious security decisions, CISOs can create a cyber-resilient environment that supports business productivity.

Finding Balance Between Cybersecurity and Productivity

As a Chief Information Security Officer, one of your most pressing responsibilities is striking the right balance between robust cybersecurity and fluid business operations. In other words, you must create a secure environment that doesn’t impede your team’s efficiency or innovation.

Mastering this balancing act requires aligning your cybersecurity strategy with your company’s broader business objectives. This alignment not only provides a robust shield against potential cyber threats but also promotes seamless business processes and enhances end-user productivity.

To strike this balance effectively, it’s crucial to consider the unique aspects of your organization’s work dynamics and its associated cyber vulnerabilities. You may need to leverage custom-fit security solutions and policies that offer flexibility to your employees while retaining the much-needed security controls.

For instance, you might opt for a multi-factor authentication process that is robust yet user-friendly, or implement a cloud-based security solution that provides necessary safeguards without impacting accessibility or flexibility.

Another key element is frequent and clear communication about security measures and their importance in the overall business context. Keeping all stakeholders informed about their role in maintaining a secure environment can help you in managing the perceived trade-off between cybersecurity and productivity.

Remember, a well-balanced cybersecurity posture isn’t about making drastic compromises on either side. Instead, it’s about creating a symbiotic relationship where productivity fuels security and vice versa. Such an approach helps in creating a resilient business ecosystem that flourishes in the face of ever-evolving cyber threats.

Addressing Employee Cybersecurity Awareness

Building a robust cybersecurity culture within an organization is no easy feat, yet it plays a pivotal role in maintaining the balance between a secure environment and thriving productivity. For CISOs, the journey towards achieving this balance starts with enlightening employees about the fundamentals of cybersecurity.

Training and awareness sessions shouldn’t be merely annual or quarterly box-ticking events. They need to be continual, comprehensive, and engaging. From understanding the different types of cyber threats to the nuances of identifying a phishing email, every bit of knowledge empowers employees to become the first line of defense against cyber-attacks.

Consider implementing interactive training modules that offer real-world examples and practical tips for employees to guard against potential threats. Simulations, for instance, provide an excellent platform for them to put their learning to the test, identify gaps, and seek necessary improvements.

At the same time, encouraging a proactive approach towards cybersecurity is essential. Employees should feel comfortable reporting potential security threats or incidents without fear of blame. Establishing secure, anonymous reporting channels can aid this, reinforcing the idea that everyone plays a part in safeguarding the organization’s digital assets.

However, remember that cultivating this culture isn’t a one-and-done deal. As cyber threats evolve, so too should your awareness programs. Keep them updated, relevant, and engaging to ensure employees are always equipped with the latest knowledge and best practices.

Ultimately, the key lies in transforming cybersecurity from an imposed mandate to a shared responsibility. By fostering an environment of awareness, understanding, and vigilance, CISOs can nurture a workforce that’s not only productive but also secure.

Streamlining Security Measures

One of the critical gears in the engine of a secure yet productive business environment is the efficient streamlining of security measures. This strategy doesn’t just fortify your cyber defense – it also paves the way for seamless operational workflows.

So, what does streamlining security measures entail? At the heart of it is the centralization of security management systems. Imagine being able to oversee and control your entire network’s security from one central hub. This setup offers a holistic view of the organization’s network, aiding the quick identification and mitigation of potential risks.

Moreover, centralization provides an ideal platform for the automation of security tasks. Routine tasks like patch management, vulnerability scanning, and event log monitoring can be automated, ensuring that they are executed promptly and precisely. Automation can drastically cut down on the time your security team spends on repetitive tasks, giving them more bandwidth to focus on strategic cybersecurity initiatives.

However, it’s worth noting that automation doesn’t mean losing the human touch in cybersecurity. Instead, it enhances human efforts by removing the burden of repetitive tasks. It’s like having a tireless assistant who is constantly vigilant, ensuring that all routine security measures are implemented without fail.

It’s also essential to integrate cybersecurity measures with other business applications. This ensures that security protocols don’t disrupt business operations but instead work in harmony with them, enhancing overall efficiency.

An additional benefit of streamlined security measures is the reduction in chances of human errors. With automation, there’s a lower likelihood of tasks being overlooked or incorrectly implemented. This not only boosts the overall security posture but also contributes to a more stable and productive work environment.

Remember, cybersecurity isn’t about creating a fortress that impedes business operations. It’s about building a protective yet flexible shield that aligns with business processes. And that’s where streamlining security measures come into play. They create a delicate balance without disrupting the balance between cybersecurity and productivity.

So, as a CISO, focus on creating a cybersecurity strategy that doesn’t feel like an obstacle course for your team. Instead, it should be a well-laid path that protects, supports, and empowers them, fueling business productivity in a secure digital environment.

Implementing Effective Access Controls

Elevating your cybersecurity strategy to the next level requires a focused approach towards access controls. Often, breaches and data leaks are the result of misplaced trust or an overly generous access policy. It is, therefore, crucial to develop and enforce strict yet flexible access controls that align with your organization’s security needs and business objectives.

At the core of effective access controls lies the ‘principle of least privilege’ (PoLP), a concept that is as effective as it is simple. It involves providing employees with only the bare minimum access necessary to execute their tasks. This approach significantly reduces your organization’s attack surface and keeps the risk of insider threats at bay. The beauty of the PoLP is that it keeps your business secure without becoming a roadblock in the way of your employees’ daily operations.

However, implementing effective access controls isn’t just about restricting access. It’s also about creating a smooth user experience. Employees should be able to access the resources they need quickly and efficiently. To achieve this, consider employing role-based access control (RBAC). This approach involves assigning access rights based on an individual’s role within the organization. As a result, you can ensure that each user has just the right amount of privilege to perform their work, nothing more, nothing less.

Moreover, employing a strong identity and access management (IAM) solution can automate the access control process. It ensures that only authenticated and authorized users gain access to your systems, reducing the risk of unauthorized access or breaches. It can also streamline user onboarding and offboarding processes, saving your IT team’s valuable time and resources.

In a nutshell, effective access controls should form an integral part of your cybersecurity strategy. While their primary goal is to enhance security, they should not impede productivity. By implementing a carefully planned access control strategy, you can strike a harmonious balance between keeping your organization’s data secure and ensuring a seamless user experience.

Prioritizing Incident Response Preparedness

A well-executed incident response plan serves as an invaluable lifeline in the stormy seas of a cybersecurity breach. Its objective is straightforward – when a cyber incident rears its ugly head, your organization should be able to navigate the situation swiftly, minimizing potential damages, and ensuring business continuity.

An effective incident response strategy is much more than a set of written instructions gathering dust in a filing cabinet. It is an active, living document that must be routinely tested, updated, and communicated across the organization. It includes well-defined roles and responsibilities to avoid confusion or delays during an incident. It also stipulates efficient communication channels to ensure that the right people have the right information at the right time.

However, the work isn’t done once the immediate crisis is over. A vital component of an effective incident response plan is a thorough post-incident analysis process. The aim here isn’t to point fingers or assign blame but to dissect the incident and understand how it occurred. This valuable insight can help identify potential gaps in your cybersecurity strategy and drive necessary improvements.

Remember, the aftermath of a cyber incident can be just as critical as the incident itself. Organizations that can learn from these incidents and adapt their strategies accordingly will be better prepared for any future threats.

In the same vein, it’s crucial to note that incident response isn’t a standalone process. Instead, it’s intrinsically linked with other aspects of your cybersecurity strategy. For instance, a well-executed access control strategy can help prevent incidents in the first place, and an educated workforce can spot potential threats before they escalate into full-blown incidents.

In essence, incident response preparedness isn’t just about responding to incidents. It’s about having the foresight to anticipate potential threats, the agility to act swiftly when an incident occurs, and the resilience to learn and grow from each experience. Prioritizing incident response preparedness within your cybersecurity strategy can help your organization strike the delicate balance between maintaining a strong security posture and ensuring seamless business operations.

Maximizing Security Without Sacrificing Functionality

Navigating the complex landscape of cybersecurity solutions can seem like a daunting task for any CISO. The key, however, lies in selecting security products that do not merely protect but also foster productivity and agility. When evaluating these solutions, your guiding principle should be: maximum security without unnecessary complexity.

Security solutions should effortlessly blend into your organization’s workflow rather than disrupting it. Look for features that make these tools easy to use and integrate with your existing systems. A solution with a user-friendly interface not only enhances adoption rates but also reduces the time and resources spent on training and troubleshooting.

It’s also beneficial to lean towards solutions that boast automation capabilities. Automated cybersecurity products effectively reduce the workload of your security team, freeing them to focus on more strategic tasks. This not only bolsters your cybersecurity stance but also improves the overall operational efficiency.

Scalability is another crucial factor to consider. Your organization’s security needs will inevitably grow and evolve along with its operations. Opting for scalable solutions equips you to adapt to this changing landscape without continually having to switch or upgrade your security tools.

In conclusion, the goal of a well-rounded cybersecurity strategy isn’t to create an impenetrable fortress at the expense of business functionality. Instead, it’s about building a flexible, resilient defense that seamlessly aligns with your organization’s workflows and objectives. By choosing security solutions that support this approach, you can enhance your organization’s cyber defense without sacrificing the productivity and agility that fuel its growth and success.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

Understanding the Power of Managed Detection and Response (MDR) for Small and Medium-Sized Businesses (SMBs)

The 2022 SMB Digital Security Sentiment Report shows that the majority of small and medium-sized businesses (SMBs) perceive themselves as more susceptible to cyberattacks compared to larger enterprises. These SMBs express concerns regarding the potential consequences of such attacks, particularly emphasizing data loss, financial ramifications, and a drop in customer confidence and trust. Interestingly, despite these concerns, their investments in cybersecurity have not yet aligned with the evolving dynamics of their operational models. 

The continued adoption of cloud computing, still-emerging hybrid workplace practices, and increased digital supply chain complexities all have led to a rise in data breaches and, thus, a more pressing need for enhanced cybersecurity measures. However, a purely reactive approach isn’t enough; critically, preventive measures are required  as cybercriminals have become more sophisticated in finding ways into corporate networks. Here, traditional security measures may fall short, highlighting the critical need for advanced solutions tailored to the specific requirements of businesses. One such solution gaining prominence is Managed Detection and Response (MDR).

MDR: A Trusted Partner for SMBs

As mentioned in Gartner® latest report, Gartner [Emerging Tech: Security — Adoption Growth Insights for Managed Detection and Response, Matt Milone, Travis Lee, Mark Wah, Published 30 June 2023]:
“MDR growth will continue as customers of all sizes embrace providers’ ability to effectively deliver managed threat disruption and containment. An increasing number of MDR customers of all sizes demand that providers are able to remotely initiate measures for active containment or disruption of a threat. Provider-delivered response actions and not just simple alert communications assist clients with their lack of security personnel and expertise. Factors including trust, geography and the security maturity of the consuming organization affect adoption of provider-led or guided response activities.”
MDR presents a favorable solution for SMBs by outsourcing the management of Extended Detection and Response (XDR) to cybersecurity providers.

Let’s delve into the core needs of SMBs related to threat detection and response and how MDR services answer them:

1. Access to additional security expertise

MDR serves as a bridge, helping you overcome expertise gaps in your security capacity by providing access to industry-leading cybersecurity professionals. Make sure your MDR partner offers local language support with a global presence. Attain top-tier protection without requiring internal security experts, or remove bottlenecks in your security operations team that may impede efficient detection and response. MDR services can be tailored to fit the specific needs and size of your business, ensuring you get the right level of protection without unnecessary complexities.

2. Enhanced detection and response capabilities

MDR goes beyond traditional cybersecurity measures, actively seeking and identifying potential threats before they can cause harm. They are tailored to detect cybersecurity breaches in the complex realm of hybrid work and enhance your capabilities to respond effectively to evolving cyber threats, such as ransomware as a service (RaaS). Opt for providers with immediate AI-powered threat detection and response, known for high detection rates, low false positives, and a light overall footprint, as validated by independent analyst appraisals and customer reviews.

3. Always-on approach

Cyber threats are constant. MDR services operate around the clock, providing continuous monitoring and rapid response to security incidents, always ensuring incidents are addressed promptly. The 24/7/365 security capabilities of experts eliminate the need for an in-house security team and monitor the threat environment around the clock.

4. Regulatory compliance

If you are looking for regulatory compliance, MDR can help you achieve key cyber controls necessary for insurability, meeting critical components of cybersecurity insurance programs and regulatory compliance and, with that, reducing the risk of penalties and legal issues.

MDR is not just for enterprises

Despite lacking the extensive resources of their larger counterparts, smaller businesses possess confidential and valuable information that requires protection. And doing nothing costs more than protecting your business. MDR tailored for smaller businesses serves as a valuable addition to existing security and IT measures, enhancing overall protection and defense. This enables organizations to proactively identify, thwart, and respond to online threats before potential damage occurs. By leveraging an MDR service, small businesses can not only fortify their security but also gain the freedom to focus on essential aspects, such as expanding their businesses.

According to a report from Gartner [Emerging Tech: Security — Adoption Growth Insights for Managed Detection and Response, Matt Milone, Travis Lee, Mark Wah, 30 June 2023]:

  • “Overall MDR mind share increased 29.14% year over year with MDR adoption growth increasing 67% from 2021 to 2022.
  • Growth is highest in education and steady across most industries, with a marked decline in energy and utilities.
  • Mind share increases with the largest companies, while adoption interest increases across private- and public-sector companies of most sizes.
  • Executive buyers have shown a significant increase in commitment through adoption interest, but the technical job role remains the dominant persona.
  • The largest market remains North America with a notable decrease in adoption interest in the Latin American market.”

This data suggests that there continues to be strong MDR demand regardless of company size and industry vertical. This is then highlighted and confirmed by the above-mentioned report, which says, “This is a trend we should expect to see continue over the next two to five years as the demand for MDR services continues to grow.”

Having an MDR service that offers capabilities beyond what a business can independently manage and has considerations for all business configurations and verticals, is, therefore, particularly important for SMBs. This is due to their varying size and focus, as they need a service that can go a step beyond conventional protection.

About ESET MDR

Our MDR service for SMBs is specifically designed to meet the above outlined needs and bring immediate benefits, especially to SMBs.

Delivered via our renowned ESET PROTECT Platform and ESET Inspect, the XDR-enabling component, we designed our ESET MDR service to swiftly examine and disrupt malicious activities and counteract adversaries. Specifically adapted for the intricacies of hybrid work settings, the service conducts threat hunting, monitoring, and response, ensuring the implementation of strong cybersecurity measures suitable for customers across varying sizes and security maturity levels.

Leveraging the knowledge of security professionals, ESET MDR can rapidly identify and counter threats within a 20-minute window. We utilize our proprietary antivirus software to gather exclusive data, especially from regions targeted by advanced hacker groups. As a customer, you can also leverage the signal hunting library, which contains pre-built behavior patterns for robust threat defense.

The ESET MDR service is available as an add-on or stand-alone offering, packaged with ESET PROTECT Enterprise and ESET PROTECT Elite.

Conclusion

Numerous cyberattacks continue to target many small organizations, posing a persistent threat regardless of business size. Unidentified threats always loom, ready to compromise systems. In the quest for security, every organization, regardless of size and industry, can benefit from the assistance and mitigation apabilities offered by MDR.

MDR emerges as a trusted ally for you, empowering you with powerful cybersecurity solutions that overcome traditional limitations. The combination of advanced technology, expert support, and a focus on compliance positions MDR as a beacon of security in the complex digital landscape. As cyber threats continue to evolve, embracing MDR services becomes not just a choice but a strategic imperative for your business.

GARTNER is a registered trademark and service mark of Gartner Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.