There has been a 172 percent increase in ransomware and $3 billion in losses due to business email compromise (BEC) scams so far in 2016, as well as nearly 500 vulnerabilities in a variety of products.
In its security roundup report, "The Reign of Ransomware,” Trend Micro provides extensive data surrounding the rise and impact of attacks.
"Ransomware is capable of crippling organizations who face it, and the cybercriminals spearheading these attacks are creatively evolving on a continuous basis to keep enterprises guessing," said Myla Pilao, Director of TrendLabs, Trend Micro. "It has dominated the threat landscape so far in 2016, causing immense losses to businesses across multiple industries. Enterprises must adopt multi-layered security solutions to optimally combat these threats that could attempt to penetrate corporate networks at any time.”
The report highlights that the occurrence of ransomware families nearly doubled, with an increase of 172 percent, in the first half of 2016 compared to 2015, further establishing ransomware as a prevalent and pervasive threat. Variants are designed to attack all levels of the network.
BEC scams spread across the world
The FBI listed more than 22,000 BEC scam victims in 2016 to date, with more than US $3 billion in losses. Trend Micro has found that the U.S. is the most targeted country for these attacks.
The report also reveals that new vulnerabilities and ransomware strengthen attacks through exploit kits. The declining use of Angler EK can be attributed to the arrest of 50 cybercriminals. As such, other EKs have taken its place, including new players like Rig and Sundown.
The report also warns of a rising number of vulnerabilities found in Adobe Flash and IoT platforms. Trend Micro and the ZDI reported several significant browser and kernel vulnerabilities, which were identified during the Pwn2Own competition.
Also highlighted in the report is that both private and public sectors fell victim to data breaches in the first half of the year, including Myspace and Verizon, several hospitals and government entities.
Meanwhile, updates in Point-of-Sale malware give rise to new attacks, according to the report. FastPoS came equipped with efficient credit card theft capabilities, affecting small to medium businesses across the globe, including some in the U.S. FighterPoS also made its debut, showing worm-like qualities that allowed cross-network infection.
Cybercriminals are also defying the odds with banking Trojans. Trojans like QAKBOT increased their attacks following the arrest of the creators of DYRE. This variant goes after crucial information including banking credentials, browsing habits and other sensitive user data.
In total, 79 new ransomware families were identified in the first six months of the year, which surpasses the total number of new families found in all of 2015. Both new and old variants caused a total of US $209 million in monetary losses to enterprises. Ransomware attacks found in the first half of 2016, like BEC scams, originated from emails 58 percent of the time.
Research shows both growth and evolution in vulnerabilities and exploit kits (EKs), as well. Angler was found to steadily decrease in use, while other EKs, like Neutrino, filled the void. New vulnerabilities and ransomware were added to keep EKs up to date and effective. Unpatched software continues to provide additional opportunities for attackers to infect networks via EKs.
In the first half of 2016, Trend Micro discovered 473 vulnerabilities in a variety of products, with 28 coming from Adobe Flash and 108 from Advantech's Web Access, demonstrating the full capabilities of the company's research teams.
"While it's unfortunate for us, cybercriminals are resilient and flexible when it comes to altering an attack method each time we find a patch or solution," said Pilao. "This creates massive problems for enterprises and individuals alike since the threats change as often as solutions are provided. It bodes well for businesses to anticipate being targeted and to prepare accordingly, implementing the latest security solutions, virtual patching and employee education to mitigate risks from all angles."