Security News > 2022 > January > Endpoint malware and ransomware detections hit all-time high

"While the total volume of network attacks shrank slightly, malware per device was up for the first time since the pandemic began," said Corey Nachreiner, CSO at WatchGuard.

Attackers disproportionately targeted the Americas - The overwhelming majority of network attacks targeted the Americas in Q3 compared to Europe and APAC. Overall network attack detections resumed a more normal trajectory but still pose significant risks - After consecutive quarters of more than 20% growth, roughly 4.1 million unique network exploits were detected in Q3. The drop of 21% brought volumes down to Q1 levels, which were still high compared to the previous year.

While there are several ways for cybercriminals to attack endpoints - from application exploits to script-based living-off-the-land attacks - even those with limited skills can often fully execute a malware payload with scripting tools like PowerSploit, PowerWare and Cobalt Strike, while evading basic endpoint detection.

Ransomware, ransomware, ransomware - After a steep decline in 2020, ransomware attacks reached 105% of 2020 volume by the end of September, as predicted at the end of the prior quarter and are on pace to reach 150% once the full year of 2021 data is analysed.

Ransomware-as-a-service operations such as REvil and GandCrap continue to lower the bar for criminals with little or no coding skills, providing the infrastructure and the malware payloads to carry out attacks globally in return for a percentage of the ransom.

The quarter's top security incident, Kaseya, was another demonstration of the ongoing threat of digital supply chain attacks - Just before the start of the long 4th of July holiday weekend in the US, dozens of organizations began reporting ransomware attacks against their endpoints.

News URL

https://www.helpnetsecurity.com/2022/01/20/endpoint-malware-ransomware-detections-q3-2021/