Table of Contents Introductory Remarks by the Director.................................................................................... 1 Executive Summary............................................................................................................... 2 Table of Contents................................................................................................................... 3 List of Used Abbreviations..................................................................................................... 4 Czech Cybersecurity During 2022 in Figures........................................................................... 5 About the Report.................................................................................................................. 6 Czech Cybersecurity in 2022 According to the NÚKIB............................................................. 7 Number of Cybersecurity Incidents in 2022 Registered by the NÚKIB................................. 7 Classification of Cyber Incidents Reported to the NÚKIB..................................................... 9 Incidents According to Entities: Growing Frequency and Higher Sophistication of Phishing Attacks............................................................................................................... 10 Cybersecurity Funding: A Growing Number of Organizations Is Increasing Their Budgets....................................................................................................................... 11 People as Experts: Increased Outsourcing and New Opportunities for Graduates........... 12 People as Users: Majority of Organizations Trains and Tests its Staff................................. 13 Cyber Threats and Actors......................................................................................................15 Attacks on Availability: Significant Growth of DDoS Attacks by Russian Language Hactivists....... 15 Malware as a Service: Growing Opportunities for Cybercrime Actors............................... 16 Phishing, Spear-Phishing, and Vishing: Growing Sophistication and Persistence.............. 18 Supply Chain Attacks: Low Incidence, but with High Potential Impact.............................. 19 Cyber Threat Actors............................................................................................................. 20 Targets of Cybercrime Attacks...............................................................................................22 Critical Information Infrastructure: Increase of Attacks on Availability of Services............ 22 Public Sector: Decrease of Incident Numbers to Values From 2020.................................. 23 Financial Sector: Number of Cyber Incidents Has Doubled................................................ 24 Industrial and Energy Sectors: New Risks Related to Smart Energy Meters....................... 25 Healthcare: Ransomware Remains a Relevant Threat........................................................ 26 Education: Growing Emphasis on User Training................................................................. 27 Digital Services: Targeted Through a Wide Range of Attacks.............................................. 29 Measures: Timeline of Select NÚKIB Warnings and Alerts in 2022........................................30 Ensuring Cybersecurity on a National Level: Strengthening Resilience Against Cyber Threats.......31 Cybersecurity Legislation: Drafting the New Cybersecurity Law............................................33 Supervisory Activities of the NÚKB in 2022...........................................................................36 Cybersecurity Exercises: CZ PRES and Health Czech...............................................................37 Awareness-Raising and Education in the Czech Republic: Positive Developments in the Education Sector...38 International cooperation: CZ PRES and the NIS 2 Directive..................................................40 Outlook: Cybersecurity Trends in the Czech Republic for 2023 and 2024...............................42 Threats for Energy Industry and Transportation................................................................. 42 Persistence of Campaigns.................................................................................................... 42 Ransomware........................................................................................................................ 42 Cyberattacks Against National Strategic Institutions........................................................... 43 Meeting the Goals of the National Cyber and Information Security Research and Development Plan for 2022...........................................................................................44 Annex 1: Evaluation of the Action Plan for the National Cyber Security Strategy of the Czech Republic for 2022..............................................................................................45 Resources:............................................................................................................................47 About the NÚKIB..................................................................................................................48 3