The number of internet users that have been attacked by malicious crypto currency mining software has increased from 1.9 million to 2.7 million in just one year. Statistics for the last 24 months show that miners are increasingly focused on developing markets, and are taking advantage of internet users in these regions to grow their revenues. This is one of the key findings in Kaspersky Lab’s annual ransomware and malicious crypto miners report, 2016-2018.

 

The report, which covers two similar periods (April to March 2016-2017 and April to March 2017-2018), shows that while ransomware can provide cybercriminals with potentially large but one-off rewards in a turbulent landscape, miners might make less money out of their victims, but through a more sustainable/ longer-term model. This is naturally gaining popularity among the cybercriminal community.

 

Kaspersky Lab experts have detected a significant change in the cyberthreat landscape: PC and mobile ransomware attacks on unique users dropped dramatically in 2017-2018 (by almost 30% and 22.5% respectively). Cybercriminals are instead opting to make their money out of crypto currency miners – specialized “mining” software which creates a new currency unit (or coin) by using the computing power of the victim PC and mobile devices. Malicious miners do so at the expense of other users, capitalizing on the power of their computers and devices without their knowledge.

 

According to the report, PC crypto miners are steadily growing. The total number of users who encountered this form of mining rose from 1,899,236 in 2016-2017, to 2,735,611 in 2017-2018.

 

Mobile crypto miners are also emerging as a threat, with unique attacks growing by 9.5%. Overall, this form of mining targeted almost 5,000 users in 2017-2018, compared to around 4,500 users in 2016-2017. Mobile users in China and India are particularly victimized by this threat.

 

“The reasons behind these changes in the cyberthreat landscape are clear. For cybercriminals, ransomware is a noisy and risky way of making money; it attracts media and state attention. The mining model however, is easier to activate and more stable – you attack your victims, discreetly build crypto currency using their CPU or GPU power, and then transfer that into real money through legal exchanges and transactions,” notes Anton Ivanov, security expert at Kaspersky Lab”.

 

Other key findings from the report include:

  • The total number of users who encountered ransomware fell by almost 30%, from 2,581,026 in 2016-2017 to 1,811,937 in 2017-2018;
  • The proportion of users who encountered ransomware at least once out of the total number of users who encountered malware fell by around 1 percentage point, from 3.88% in 2016-2017 to 2.80% in 2017-2018;
  • Among those who encountered ransomware, the proportion who encountered cryptors fell by around 3 percentage points, from 44.6% in 2016-2017 to 41.5% in 2017-2018;
  • The number of users attacked with cryptors almost halved, from 1,152,299 in 2016-2017 to 751,606 in 2017-2018;
  • The number of users attacked with mobile ransomware fell by 22.5% from 130,232 in 2016-2017 to 100,868 in 2017-2018;
  • The total number of users who encountered miners rose by almost 44.5% from 1,899,236 in 2016-2017 to 2,735,611 in 2017-2018;
  • The share of miners detected, from the overall number of threats detected, also grew from almost 3% in 2016-2017 to over 4% in 2017-2018;
  • The share of miners detected, from overall risk tool detections, is also on the rise – from over 5% in 2016-2017 to almost 8% in 2017-2018;
  • The total number of users who encountered mobile miners also grew – but at a steadier pace, growing by 9.5% from 4,505 in 2016-2017 to 4,931 in 2017-2018.

 

To reduce the risk of infection with ransomware and miners, users are advised to:

  1. Treat email attachments, or messages from people you don’t know, with caution. If in doubt, don’t open it.
  2. Back up data regularly.
  3. Always keep software updated on all the devices you use. To prevent miners and ransomware from exploiting vulnerabilities, use tools that can automatically detect vulnerabilities and download and install patches.
  4. For personal devices, use a reliable consumer security solution and remember to keep key features – such as System Watcher – switched on.
  5. If you’re a business, enhance your preferred third party security solution with newest version of Kaspersky Anti-Ransomware Tool.
  6. For superior protection use an endpoint security solution that is powered by behavior detection and able to roll back malicious actions.
  7. Don’t overlook less obvious targets, such as queue management systems, POS terminals, and even vending machines. As the miner that relied on the EternalBlue exploit shows, such equipment can also be hijacked to mine cryptocurrency.
  8. Use application control to track malicious activity in legitimate applications. Specialized devices should be in Default Deny mode. Use dedicated security solution, such as Kaspersky Endpoint Security for Business that includes these functions.
  9. To protect the corporate environment, educate your employees and IT teams, keep sensitive data separate, restrict access, and always back up everything.
  10.  Last, but not least, remember that ransomware is a criminal offence. You shouldn’t pay. If you become a victim, report it to your local law enforcement agency.

 

Check out the No Ransom website for the latest decryptors, ransomware removal tools, and information about ransomware protection.

 

Read the full version of the report on Securelist.com.


RECOMMENDED ARTICLE FOR TECHWORLD


 
Roaming Mantis Extends DNS Hijacking Attacks from Asia to Rest of World, Adds Crypto-Mining
Techworld Date Posted: 18 May 2018 2:23 PM | 311 Views
On 16 April, Kaspersky Lab researchers reported on a new Android malware distributed through a domain name system (DNS) hijacking technique and targeting mainly smartphones in Asia. Four weeks on, the threat continues to.... See More
 
Roaming Mantis Extends DNS Hijacking Attacks from Asia to Rest of World, Adds Crypto-Mining
Techworld Date Posted: 2:23 PM | 311 Views
On 16 April, Kaspersky Lab researchers reported on a new Android malware distributed through a domain name system (DNS) hijacking technique and targeting mainly smartphones in Asia. Four weeks on, the threat continues to...See More

 
PLDT Highlights Aggressive Fiber Network Rollout at 2018 FTTH APAC Confab
Techworld Date Posted: 10 May 2018 10:45 AM | 302 Views
Telco leader PLDT outlined its nationwide fiber network rollout efforts at the recent FTTH APAC Conference held at the Shangri-La at The Fort. . See More
 
PLDT Highlights Aggressive Fiber Network Rollout at 2018 FTTH APAC Confab
Techworld Date Posted: 10:45 AM | 302 Views
Telco leader PLDT outlined its nationwide fiber network rollout efforts at the recent FTTH APAC Conference held at the Shangri-La at The Fort. See More

 
SECURITY AT YOUR FINGERTIPS: Kaspersky Lab Launches On-Demand Security Service in PH
Techworld Date Posted: 15 March 2019 8:54 AM | 126 Views
Kaspersky Lab has announced its on-demand service, which allows internet users in the Philippines to secure their devices on a weekly or monthly basis, for as little as 10 to 30 pesos for seven.... See More
 
SECURITY AT YOUR FINGERTIPS: Kaspersky Lab Launches On-Demand Security Service in PH
Techworld Date Posted: 8:54 AM | 126 Views
Kaspersky Lab has announced its on-demand service, which allows internet users in the Philippines to secure their devices on a weekly or monthly basis, for as little as 10 to 30 pesos for seven...See More

 
Exploring the Benefits of Gender Diversity in Cybersecurity
Techworld Date Posted: 27 April 2019 11:13 AM | 65 Views
Research shows more diverse teams are higher performing when compared to homogenous teams. Yet today, only 11% of cybersecurity professionals are women. This gender discrepancy, coupled with the cybersecurity skills shortage, offers women a.... See More
 
Exploring the Benefits of Gender Diversity in Cybersecurity
Techworld Date Posted: 11:13 AM | 65 Views
Research shows more diverse teams are higher performing when compared to homogenous teams. Yet today, only 11% of cybersecurity professionals are women. This gender discrepancy, coupled with the cybersecurity skills shortage, offers women a...See More

 
Over One Third of All Phishing Attacks Target Financial Sector Customers in Second Quarter of 2018
Techworld Date Posted: 22 August 2018 1:42 PM | 358 Views
In the second quarter of 2018, Kaspersky Lab’s anti-phishing technologies prevented over 107 million attempts to visit phishing pages, of which 35.7% were related to financial services and targeting customers through fake banking or.... See More
 
Over One Third of All Phishing Attacks Target Financial Sector Customers in Second Quarter of 2018
Techworld Date Posted: 1:42 PM | 358 Views
In the second quarter of 2018, Kaspersky Lab’s anti-phishing technologies prevented over 107 million attempts to visit phishing pages, of which 35.7% were related to financial services and targeting customers through fake banking or...See More

 
Career Climbing in the Digital Age: Kaspersky Lab Finds One-in-Two Hide Social Media Activity from Their Boss
Techworld Date Posted: 10 May 2019 2:42 PM | 63 Views
With 90% of people in employment going online several times a day, it can be hard for most workers to keep their private and work-life separate during the working day (and beyond). The recently.... See More
 
Career Climbing in the Digital Age: Kaspersky Lab Finds One-in-Two Hide Social Media Activity from Their Boss
Techworld Date Posted: 2:42 PM | 63 Views
With 90% of people in employment going online several times a day, it can be hard for most workers to keep their private and work-life separate during the working day (and beyond). The recently...See More

 
HyperX Now the Official Gaming Headset Partner of the Dallas Mavericks and the Future Dallas NBA 2K League Team
Techworld Date Posted: 7 December 2017 3:19 PM | 373 Views
HyperX®, the gaming division of Kingston Technology, announced the official gaming headset sponsorship of the Dallas Mavericks and the future Dallas NBA 2K League team. . See More
 
HyperX Now the Official Gaming Headset Partner of the Dallas Mavericks and the Future Dallas NBA 2K League Team
Techworld Date Posted: 3:19 PM | 373 Views
HyperX®, the gaming division of Kingston Technology, announced the official gaming headset sponsorship of the Dallas Mavericks and the future Dallas NBA 2K League team. See More

 
MSI Gaming Is Coming in Cebu This December
Techworld Date Posted: 29 November 2017 4:53 PM | 341 Views
Micro-star International (MSI), the world’s best-selling gaming laptop brand, is taking a big step in announcing their new concept corner to be launch this December 2017. . See More
 
MSI Gaming Is Coming in Cebu This December
Techworld Date Posted: 4:53 PM | 341 Views
Micro-star International (MSI), the world’s best-selling gaming laptop brand, is taking a big step in announcing their new concept corner to be launch this December 2017. See More

 
Sony Wins Big at the 2017 Red Dot Product Design Awards
Techworld Date Posted: 1 August 2017 11:00 AM | 307 Views
Proving its dedication to continuous innovation, Sony received numerous distinctions in the recently concluded Red Dot Product Design Awards. Some of the world's most iconic products to-date across different categories were recognized with the.... See More
 
Sony Wins Big at the 2017 Red Dot Product Design Awards
Techworld Date Posted: 11:00 AM | 307 Views
Proving its dedication to continuous innovation, Sony received numerous distinctions in the recently concluded Red Dot Product Design Awards. Some of the world's most iconic products to-date across different categories were recognized with the...See More

 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 10 November 2017 11:03 AM | 357 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast . See More
 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 11:03 AM | 357 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast See More


Power by

Download Free AZ | Free Wordpress Themes