To Customer Support To Customer Support

Events
Leaderboard
Customer Support

Home
Community overview
Welcome
Threat Reports

Threat Reports

All of our yearly Threat Reports and Nastiest Malware Reports

16 Topics
253 Replies

When you subscribe we will email you when there is a new topic in this category

REPORT

2024 threat hunter perspectives: Key insights from OpenText’s latest re...

Report

Key Insights from the OpenText 2024 Threat Perspective

Nastiest Malware

Nastiest Malware 2023

16 Topics

Most replies

Most views

Newest first

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

Nastiest Malware 2024REPORT

Steam the Webinar on demand HEREAs we look back on the cybersecurity landscape of 2024, it's clear that the world of digital threats continues to evolve at an alarming pace in parallel with AI. This year has seen ransomware groups adapt and innovate, pushing the boundaries of their malicious capabilities and evasiveness from law enforcement. In our annual "Nastiest Malware" report, now in its sixth year, we've observed a steady increase in both the number and sophistication of malware attacks. The ransomware sector, in particular, has witnessed the emergence of "business models," with ransomware-as-a-service (RaaS) dominating the scene. Elite ransomware authors have concluded that profit sharing and risk mitigation are key contributors to their consistent success and evasion of authorities.The saga of LockBit in 2024 exemplifies the resilience and adaptability of these cybercriminal groups. Despite a major law enforcement operation in February, dubbed "Operation Cronos," which saw the

6237

1 month ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

2024 threat hunter perspectives: Key insights from OpenText’s latest reportREPORT

Be sure to join the Webinar! In today’s evolving threat landscape, cyber defenders are constantly adapting to new adversarial tactics and emerging vulnerabilities. The latest 2024 Threat Hunter Perspective from OpenText™ sheds light on the most pressing threats, nation-state activities, and security recommendations enterprises must consider in the months ahead. Here are the key findings and expert insights to help you stay ahead of the curve. Nation-state collaboration with cybercrime ringsOne of the standout trends identified in the report is the increasing collaboration between nation-state actors and cybercrime rings. Adversaries are more coordinated than ever, launching synchronized attacks aimed at maximizing disruption and confusion.Russia: Cyber operations are ongoing, with particular focus on Ukraine and NATO countries, often leveraging criminal groups like Killnet and Lokibot to amplify attacks. China: Expanding its focus to South China Sea neighbors, China often partners wit

894

1 month ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

Key Insights from the OpenText 2024 Threat PerspectiveReport

As we navigate through 2024, the cyber threat landscape continues to evolve, bringing new challenges for both businesses and individual consumers. The latest OpenText Threat Report provides insight into these changes, offering vital insights that help us prepare and protect ourselves against emerging threats. Here’s what you need to know: The Resilience of RansomwareRansomware remains a formidable adversary, with groups like LockBit demonstrating an uncanny ability to bounce back even after significant law enforcement actions. Despite a recent crackdown that saw authorities dismantle its infrastructure, LockBit swiftly resumed operations, even taunting law enforcement agencies in the process. This adaptability highlights how resourceful ransomware groups have become, enabling them to evade detection and persistently challenge defenders.For businesses, this means implementing a comprehensive incident response plan that includes secure, immutable backups and regular testing to ensure rap

11693

7 months ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

Nastiest Malware 2023Nastiest Malware

Stream the Webinar on demand!https://www.brighttalk.com/webcast/18665/593543Check out our Nastiest Malware infographic attached below! We've been doing the Nastiest Malware series for over 5 years now and in that time, we have seen a steady increase in the number and sophistication of malware attacks. Ransomware has been the most prevalent type of malware, with cybercriminals increasingly targeting businesses and organizations. Criminal actors in the Ransomware sector have come up with new “business models” and ransomware-as-a-service (RaaS) is dominating. Elite Ransomware authors appear to have concluded that profit sharing and risk mitigation are top contributors to their consistent success and reliable evasion from authorities. Malware payloads are becoming more sophisticated and difficult to detect, and we expect their tactics to be ever evolving. Reflecting on the past five years of the malware landscape offers invaluable insights into the evolution of cyber threats. In 2019, the

469716

9 months ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

📊 2023 OpenText Cybersecurity Threat ReportReport

Our latest OpenText Cybersecurity Threat Report is finally here! Cybersecurity professionals were kept on their toes throughout 2022. Russia’s invasion of Ukraine sent shockwaves through organized cybercrime and disrupted ongoing operations by REvil and Conti. Global law enforcement continued to aggressively target threat actors, including the Hive ransomware gang. And discovery of critical vulnerabilities and exposures (CVE) continued at a record pace, with nine CVEs published with scores of 9 or higher. Our report is full of great insights. Some key findings include:The Middle East, Asia, and South America were the regions with the highest percentage of infections. 55.6% of consumer PCs were infected more than once, and 19.9% infected more than 5 times. Facebook was most often impersonated company in phishing attacks. During 2022, 84% of ransomware attacks now include leak sites The year-end average for ransomware payments in 2022 has skyrocketed to over $400,000With Ransomware now t

392233

1 year ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

Nastiest Malware 2022Nastiest Malware

With 2023 around the corner, we’ve seen yet another eventful year for the threat landscape and malware continues to be center stage in the threats posed towards individuals, businesses, and governments. The infosec industry continues the struggle of the perpetual cat and mouse game tactics that haven’t really stopped since cybercriminals first started decades ago. This absolutely accelerated into overdrive the past 9 years with the mainstream adoption of ransomware payloads and cryptocurrency facilitating payments.If you’ve seen our writeup of Blackhat 2022, the keynote speakers noted that in 25 years of doing hacking conferences, we still don’t have a handle on what’s going on, and the surface area of attack is only growing so we all expect it to get worse.The ransomware double extortion tactic continues to be a match made in heaven for criminals and absolute hell for victims. Every major ransomware campaign has been utilizing a Tor leak site for data exfiltrated with the intention of

527442

2 years ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

2022 BrightCloud® Threat Report: The year of innovation for cybercrimeReport

Our latest BrightCloud Threat Report is finally here! This year, our findings show us that cybercriminals are improving their efforts to evade detection. 2021 was the year where everything security-related that could go wrong did go wrong. We witnessed unprecedented attacks on the supply chain around the world. Despite American and Russian coordinated efforts to take down Emotet, REvil, and Conti, cybercriminals found avenues to resurrect themselves and carry out their lethal efforts.The normalization of remote and hybrid work continued to shift the way bad actors pursue lucrative avenues for exploitation. We also witnessed cybercriminals strategically releasing their executed attacks during specific times of the year.Our report is full of great insights. Some key findings include:The Middle East, Asia, and Africa were the regions with the highest percentage of infections. 53% of consumer PCs were infected more than once, and 19% infected more than 5 times. Apple was most often imperso

4794119

2 years ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

BrightCloud® Threat Report Mid-Year UpdateReport

Every year at BlackHat USA we debut the mid-year update to our yearly flagship Threat Report. Our mid-year update provides contextual insights from the 2022 BrightCloud® Threat Report. These updates highlight the most recent trends in malware and phishing within the first six months of 2022.If you haven’t already, check out our 2022 BrightCloud Threat Report The Manufacturing vertical continues to experience the highest above-average infection rate, rising just over 12% since 2021 to 66.5%. The Information and Public Administration verticals also saw spikes in above-average infection rates, 47.4% and 42.7%, respectively. Windows 11 adoption remains stagnant, only rising 4% for businesses and 15% for consumers within the first nine months of the release. Since the adoption of Windows 11 has been slow, these results highlight the importance of incorporating a layered security approach that includes DNS protection which helps reduce infection rates.Protective DNS services are essential co

9458

2 years ago

TylerMSr. Security Analyst & Community Manager

published in Threat Reports

Nastiest Malware 2021nastiest malware

It's Like 2020 But WorseCheck out the full infographic attached below!Check out our Q&A and maybe even win a prize This year was yet another year with COVID-19 and malware running rampant in the headlines. Be it in person or online, the world is still struggling in the fight against viruses. This year took another ghastly turn when attacking critical infrastructure and supply chains became a new trend. Perhaps because popular botnets were down, or maybe it’s just plain old-fashioned nation-state sponsored attacks.We saw some previous big players exit the scene this year, some vacation to the beach and some off to prison. In any event, 2021 was one where cyberthreats, especially ransomware, dominated the news.Ransomware extortion has evolved from a trend into a new normal. Every major ransomware campaign is running the double extortion method, a scary prospect for small businesses. Not only are they stealing and locking files away, but the bad actors will absolutely leak data in the

222511

3 years ago

freydrewRetired Webrooter

published in Threat Reports

The 2021 Webroot BrightCloud® Threat Report: 54% of Phishing Sites use HTTPS to Trick Users

The latest Webroot BrightCloud Threat Report is here, and our findings show that cybercriminals are as creative and hardworking as ever. Although 2020 brought countless challenges for businesses and individuals all over the world, it seems to have offered cybercriminals new avenues to scam internet users, steal data, and cause disruption.But the criminals weren’t the only ones hard at work. Cybersecurity analysts have been clocking overtime to identify and neutralize new threat tactics as quickly as they appear. Operating systems and web browsers are making effective improvements to their built-in security. Security awareness training for employees continues to improve security postures. Nations and companies are working together to break down cybercriminal infrastructure. Here are some of the highlights from the reportCriminals targeted COVID-19 topics like it was their job (because it kind of is…) Most of the malicious spam (malspam) emails we’ve seen have used COVID-related phishin

3261611

3 years ago