Cape Town, 02 Nov 2016
In the third quarter of 2016, all signs indicate that cybercrime is here to stay, in fact attacks continue to become more frequent and destructive.
Over the quarter, Panda Security captured 18 million new malware samples, more than 200 000 samples daily.
The quarter at a glance
Cybercrime continues to grow at an exponential rate, fuelled by the opportunity for large financial rewards.
This quarter saw Ransomware mature, with new variants of successful malware such as Locky, and the development of a model known as Ransomware-as-a-Service (RAAS), whereby developers create Ransomware for distributors, these distributors then target and infect victims - allowing both parties to achieve greater profits.
Another key development was the occurrence of DDOS attacks. Notable DDOS attacks in Q3 include that of Cyber Security journalist Brian Krebs. Krebs uncovered vDoS - a business offering DDOS attack services - that lead to the arrest of its key members. Subsequently, Krebs' site became the victim of a massive DDOS attack that saw Google step in to restore the site. As one of the largest attack of its kind, hackers leveraged IOT devices to send 620GB of data per second - at its peak - to the site. Although this particular attack was motivated by revenge, similar attacks this quarter have been highly profitable, earning criminals up to R8.6 million.
The Gaming world took a big hit, as cyber-attacks targeted multiple gaming sites, gaining access to millions of users' personal information. These attacks were largely launched using botnets composed of smartphones, and effected users of Overwatch, World of Warcraft and Diablo 3. Further attacks saw more than 3.5 million users exposed when Dota 2 and mobile game Clash of the Kings were targeted. These highlight just a few incidences in the Gaming world in the last three months.
The Banking sector remains a target for hackers as attacks on ATMs, POS terminals and Bitcoin wallets continue to become more frequent and more advanced.
A Taiwanese ATM attack this quarter indicated just how advanced cybercriminals have become when they were able to hack the bank's internal network and withdraw over R28 million without even touching the ATM itself.
POS terminals continue to become victims of new versions of malware variant PunkeyPOS - affecting thousands of terminals in the US alone.
Another big victim was Yahoo - one of the biggest attacks of its kind revealed this quarter indicated that 500 million user accounts had been compromised in a 2014 attack.
Finally, Q3 saw the largest Bitcoin robbery to date, when R84 billion worth of Bitcoin was stolen by hackers.
Q4 and beyond
There is no doubt in our minds that cybercrime will continue to grow and evolve at a rapid rate in the next quarter and beyond.
We have already seen some instances of the dangers IOT can bring and this is likely to increase as IOT becomes more integrated into our daily lives. From TVs and fridges to cars - anything with an Internet connection can become a threat, particularly as many IOT devices do not currently have sufficient protection from cyber criminals' activities.
It is imperative that we alert ourselves to these threats and ensure we have the best protection in place.
View the full PandaLabs Q3 Report for more detail on specific attacks and find out how you can protect yourself and your business from the advanced threats with Panda.
Share