The number of internet users that have been attacked by malicious crypto currency mining software has increased from 1.9 million to 2.7 million in just one year. Statistics for the last 24 months show that miners are increasingly focused on developing markets, and are taking advantage of internet users in these regions to grow their revenues. This is one of the key findings in Kaspersky Lab’s annual ransomware and malicious crypto miners report, 2016-2018.

 

The report, which covers two similar periods (April to March 2016-2017 and April to March 2017-2018), shows that while ransomware can provide cybercriminals with potentially large but one-off rewards in a turbulent landscape, miners might make less money out of their victims, but through a more sustainable/ longer-term model. This is naturally gaining popularity among the cybercriminal community.

 

Kaspersky Lab experts have detected a significant change in the cyberthreat landscape: PC and mobile ransomware attacks on unique users dropped dramatically in 2017-2018 (by almost 30% and 22.5% respectively). Cybercriminals are instead opting to make their money out of crypto currency miners – specialized “mining” software which creates a new currency unit (or coin) by using the computing power of the victim PC and mobile devices. Malicious miners do so at the expense of other users, capitalizing on the power of their computers and devices without their knowledge.

 

According to the report, PC crypto miners are steadily growing. The total number of users who encountered this form of mining rose from 1,899,236 in 2016-2017, to 2,735,611 in 2017-2018.

 

Mobile crypto miners are also emerging as a threat, with unique attacks growing by 9.5%. Overall, this form of mining targeted almost 5,000 users in 2017-2018, compared to around 4,500 users in 2016-2017. Mobile users in China and India are particularly victimized by this threat.

 

“The reasons behind these changes in the cyberthreat landscape are clear. For cybercriminals, ransomware is a noisy and risky way of making money; it attracts media and state attention. The mining model however, is easier to activate and more stable – you attack your victims, discreetly build crypto currency using their CPU or GPU power, and then transfer that into real money through legal exchanges and transactions,” notes Anton Ivanov, security expert at Kaspersky Lab”.

 

Other key findings from the report include:

  • The total number of users who encountered ransomware fell by almost 30%, from 2,581,026 in 2016-2017 to 1,811,937 in 2017-2018;
  • The proportion of users who encountered ransomware at least once out of the total number of users who encountered malware fell by around 1 percentage point, from 3.88% in 2016-2017 to 2.80% in 2017-2018;
  • Among those who encountered ransomware, the proportion who encountered cryptors fell by around 3 percentage points, from 44.6% in 2016-2017 to 41.5% in 2017-2018;
  • The number of users attacked with cryptors almost halved, from 1,152,299 in 2016-2017 to 751,606 in 2017-2018;
  • The number of users attacked with mobile ransomware fell by 22.5% from 130,232 in 2016-2017 to 100,868 in 2017-2018;
  • The total number of users who encountered miners rose by almost 44.5% from 1,899,236 in 2016-2017 to 2,735,611 in 2017-2018;
  • The share of miners detected, from the overall number of threats detected, also grew from almost 3% in 2016-2017 to over 4% in 2017-2018;
  • The share of miners detected, from overall risk tool detections, is also on the rise – from over 5% in 2016-2017 to almost 8% in 2017-2018;
  • The total number of users who encountered mobile miners also grew – but at a steadier pace, growing by 9.5% from 4,505 in 2016-2017 to 4,931 in 2017-2018.

 

To reduce the risk of infection with ransomware and miners, users are advised to:

  1. Treat email attachments, or messages from people you don’t know, with caution. If in doubt, don’t open it.
  2. Back up data regularly.
  3. Always keep software updated on all the devices you use. To prevent miners and ransomware from exploiting vulnerabilities, use tools that can automatically detect vulnerabilities and download and install patches.
  4. For personal devices, use a reliable consumer security solution and remember to keep key features – such as System Watcher – switched on.
  5. If you’re a business, enhance your preferred third party security solution with newest version of Kaspersky Anti-Ransomware Tool.
  6. For superior protection use an endpoint security solution that is powered by behavior detection and able to roll back malicious actions.
  7. Don’t overlook less obvious targets, such as queue management systems, POS terminals, and even vending machines. As the miner that relied on the EternalBlue exploit shows, such equipment can also be hijacked to mine cryptocurrency.
  8. Use application control to track malicious activity in legitimate applications. Specialized devices should be in Default Deny mode. Use dedicated security solution, such as Kaspersky Endpoint Security for Business that includes these functions.
  9. To protect the corporate environment, educate your employees and IT teams, keep sensitive data separate, restrict access, and always back up everything.
  10.  Last, but not least, remember that ransomware is a criminal offence. You shouldn’t pay. If you become a victim, report it to your local law enforcement agency.

 

Check out the No Ransom website for the latest decryptors, ransomware removal tools, and information about ransomware protection.

 

Read the full version of the report on Securelist.com.


RECOMMENDED ARTICLE FOR TECHWORLD


 
An Easy Way for People in the Philippines to Access Their Money on Messenger
Techworld Date Posted: 23 September 2017 11:20 AM | 214 Views
Today, PayMaya and GCash, in partnership with Facebook, announced an easy new way for people to send money to friends, pay bills, and buy mobile data using Messenger. People in the Philippines regularly connect.... See More
 
An Easy Way for People in the Philippines to Access Their Money on Messenger
Techworld Date Posted: 11:20 AM | 214 Views
Today, PayMaya and GCash, in partnership with Facebook, announced an easy new way for people to send money to friends, pay bills, and buy mobile data using Messenger. People in the Philippines regularly connect...See More

PCBG Contributing Writer
Machine Learning AI vs Employee Vigilance
Techworld • By: PCBG Contributing Writer | Date Posted: 1 August 2017 9:43 AM | 524 Views
Here we are again. Man versus machine. On one corner, we have the machine capable of reading huge amounts of data in so little time, and on the other, an employee who knows nothing.... See More
PCBG Contributing Writer
Machine Learning AI vs Employee Vigilance
Techworld • By: PCBG Contributing Writer | Date Posted: 9:43 AM | 524 Views
Here we are again. Man versus machine. On one corner, we have the machine capable of reading huge amounts of data in so little time, and on the other, an employee who knows nothing...See More

 
Grade School Students, Big Winner in Power Mac Center App Contest
Techworld Date Posted: 27 February 2019 3:51 PM | 85 Views
A game app that will help toddlers and grade school students build their passion for learning bagged the grand prize in Power Mac Center’s recently concluded “emPOWER UP! Design a Better World: App Development.... See More
 
Grade School Students, Big Winner in Power Mac Center App Contest
Techworld Date Posted: 3:51 PM | 85 Views
A game app that will help toddlers and grade school students build their passion for learning bagged the grand prize in Power Mac Center’s recently concluded “emPOWER UP! Design a Better World: App Development...See More

 
MSI Announces Clearance Sale Exclusive to PC Express Gilmore
Techworld Date Posted: 7 September 2017 3:26 PM | 354 Views
Big Savings with MSI Clearance Sale exclusive at PC Express Gilmore Branch located at UNIT 2A 2ND FLOOR, 25 Gilmore Ave, New Manila, Quezon City, Metro Manila. Save as much as P55,000 on selected.... See More
 
MSI Announces Clearance Sale Exclusive to PC Express Gilmore
Techworld Date Posted: 3:26 PM | 354 Views
Big Savings with MSI Clearance Sale exclusive at PC Express Gilmore Branch located at UNIT 2A 2ND FLOOR, 25 Gilmore Ave, New Manila, Quezon City, Metro Manila. Save as much as P55,000 on selected...See More

 
Q2 2017 Akamai state of the Internet Security Report Analyzes Re-emergence of PBOT Malware Domain Generation Algorithms Relationship Between Mirai Command and Control and Attack Targets
Techworld Date Posted: 29 August 2017 3:41 PM | 342 Views
Newly released data shows that distributed denial of service (DDoS) and web application attacks are on the rise once again, according to the Second Quarter, 2017 State of the Internet / Security Report released.... See More
 
Q2 2017 Akamai state of the Internet Security Report Analyzes Re-emergence of PBOT Malware Domain Generation Algorithms Relationship Between Mirai Command and Control and Attack Targets
Techworld Date Posted: 3:41 PM | 342 Views
Newly released data shows that distributed denial of service (DDoS) and web application attacks are on the rise once again, according to the Second Quarter, 2017 State of the Internet / Security Report released...See More

 
Introducing New Nokia Smartphones: Delivering Pioneering Experiences across the Range and True Innovation in Imaging
Techworld Date Posted: 27 February 2019 4:12 PM | 114 Views
HMD Global, the home of Nokia phones, today announced four new Android smartphones, including the world’s first smartphone with a unique five camera array, the Nokia 9 PureView. With a dedication to delivering quality.... See More
 
Introducing New Nokia Smartphones: Delivering Pioneering Experiences across the Range and True Innovation in Imaging
Techworld Date Posted: 4:12 PM | 114 Views
HMD Global, the home of Nokia phones, today announced four new Android smartphones, including the world’s first smartphone with a unique five camera array, the Nokia 9 PureView. With a dedication to delivering quality...See More

 
2018 Cyber Security Predictions
Techworld Date Posted: 16 December 2017 12:00 PM | 583 Views
This past year, cyber criminals caused major service disruptions around the world, using their increasing technical proficiency to break through cyber defenses. See More
 
2018 Cyber Security Predictions
Techworld Date Posted: 12:00 PM | 583 Views
This past year, cyber criminals caused major service disruptions around the world, using their increasing technical proficiency to break through cyber defensesSee More

 
Data Risks Give No Rewards, Kaspersky Lab Warns
Techworld Date Posted: 31 July 2017 5:04 PM | 401 Views
Users are putting their precious and sensitive data in danger, by the way they share both their information, and their physical devices containing this information with others. Kaspersky Lab's My Precious Data: Stranger Danger.... See More
 
Data Risks Give No Rewards, Kaspersky Lab Warns
Techworld Date Posted: 5:04 PM | 401 Views
Users are putting their precious and sensitive data in danger, by the way they share both their information, and their physical devices containing this information with others. Kaspersky Lab's My Precious Data: Stranger Danger...See More

 
Realme Philippines Offers Wide-Activities for Lazada 12.12 Including Whole-Day Sale of Php5,490 for Realme C1
Techworld Date Posted: 10 December 2018 1:34 PM | 213 Views
The Realme C1, the #RealEntryLevelKing, redefines the benchmark for entry-level smartphones, packing software and hardware features previously not available in devices in the same price segment.. See More
 
Realme Philippines Offers Wide-Activities for Lazada 12.12 Including Whole-Day Sale of Php5,490 for Realme C1
Techworld Date Posted: 1:34 PM | 213 Views
The Realme C1, the #RealEntryLevelKing, redefines the benchmark for entry-level smartphones, packing software and hardware features previously not available in devices in the same price segment.See More

 
F5 Delivers Application Services for a Multi-Cloud World
Techworld Date Posted: 12 July 2017 2:12 PM | 336 Views
MANILA, PHILIPPINES – F5 Networks (NASDAQ: FFIV) announces the availability of offerings designed to provide consistent application services in multi-cloud environments—giving companies greater deployment flexibility, more effective security, and faster time to market.. See More
 
F5 Delivers Application Services for a Multi-Cloud World
Techworld Date Posted: 2:12 PM | 336 Views
MANILA, PHILIPPINES – F5 Networks (NASDAQ: FFIV) announces the availability of offerings designed to provide consistent application services in multi-cloud environments—giving companies greater deployment flexibility, more effective security, and faster time to market.See More


Power by

Download Free AZ | Free Wordpress Themes