This malicious expression malware became the most used cyber attacks In March, it affected approximately 10% of organizations worldwide, in Brazil and worldwide, twice the rate recorded in February. The data is included in the “Global Threat Index” published this Tuesday by Check Point Research (12).
based on a variety of techniques to avoid detection Trojan horse It spreads through sophisticated, mostly phishing emails with malicious attachments or links. The dissemination has been facilitated by sending related messages. Easter.
Joyful easter phishing scam According to the company, using Emotet allegedly suffered from sending messages with headlines like “Happy Easter” all over the world. After opening the email and clicking on the XLS file it contains, the malware installs itself on the device.
“As Easter weekend approaches, we expect to see more of these scams and encourage users to be cautious even if the email appears to be from a reliable source,” warned Maya Horowitz, Check Point’s vice president of research. It is best not to open suspicious messages.
Other highlights
Being able to monitor and collect the information written on the victim’s keyboard, AgentTesla Another malware highlighted last month was 2% of organizations worldwide. It also saves screenshots and filters stored credentials in Chrome and Edge.
Still in the global rankings, another digital plague that claims many victims, XMRigIt also affects 2% of companies. It is a CPU mining software used in the process. Monero cryptocurrency.
already list The best malware in Brazil Emotet in March, chaes This gluteba in the first three positions. According to the survey, most (67%) are sent via email.
and in relation mobile malwareThe AlienBot was most common in attacks targeting banking apps. Soon, xHelper This FluBotall target Android devices.
Most targeted industries and vulnerabilities
This Global Threat Index March also showed that the Education/Research and Government/Military sectors are the most targeted sectors globally. In Brazil, the attacks mainly targeted the Systems Integrator/VAR/Distributor and Retail/Wholesale segments.
In contrast, the vulnerability Apache Log4j Although addressed in late 2021, it was the most exploited, followed by the Web Server Open Git Repository Information Disclosure.
Source: Tec Mundo
