In the second half of 2024, cybercriminals have been highly active, exploiting security loopholes and developing new attack vectors. Key highlights include:
- Infostealers: Formbook has overtaken Agent Tesla as the leading infostealer, while Lumma Stealer's detections surged by 400%. RedLine Stealer was taken down by authorities, potentially paving the way for new threats.
- Cryptocurrency Threats: With cryptocurrencies reaching record values, cryptostealer detections rose significantly, especially on macOS and Android platforms.
- Mobile Threats: A novel attack vector using Progressive Web Apps (PWA) and WebAPK technologies emerged, bypassing traditional security measures and targeting banking credentials.
- Social Media Scams: Scams using deepfake videos and company-branded posts increased by 335%, targeting victims with fraudulent investment schemes.
- Accommodation Booking Scams: Scammers used compromised accounts on platforms like Booking.com and Airbnb to defraud users with fake payment pages.
- Ransomware: The takedown of LockBit led to the rise of RansomHub, which quickly became a dominant ransomware player.
Find out more in the latest Threat Report by ESET Research.