PandaLabs Q1 2017 report: cybercrime tactics, shifts

© solarseven via 123RF

The cybercrime industry continues to grow on the back of profitable attacks. The development of ransomware-as-a-service (RaaS) and organisations like Vdos, an organisation specialising in DDoS attacks, indicate the professionalism of the cybercrime industry. In Q1 the company continued to see new and adapted attack methods such as RDPatcher, malware detected by PandaLabs in its attempt to access the victim’s endpoint and prepare it for rental on the dark web.

Politically motivated cyber attacks

Fuelling the continued development of the cybercrime industry are politically motivated cyber attacks. In recent months, cyberwarfare has become a popular tactic in enforcing political agendas. In Q4 of 2016, the company saw some of the first high-profile instances of cyberwarfare, with accusations of Russia’s interference in the 2016 US elections.

The gravity the development is clear as countries like Germany have now begun to develop cyber-command centres to monitor online activity – this quarter France and the Netherlands reconsidered electronic voting procedures to avoid situations like the 2016 US elections.

Targeted IoT device attacks

Targeted attacks on IoT devices continue to threaten our safety in line with the ever-increasing number of IoT devices. In February, at the European Broadcasting Union Media Cyber Security Seminar, security consultant Rafael Scheel demonstrated more ways these devices can breach unsecured networks by creating an exploit that would allow an attacker to take control of a Smart TV using only a DDT signal.

Recent developments in robotics and AI have led to that belief that the fourth industrial revolution is not far off. Robotics and AI technology could do more than just take over jobs - introducing virtual assistants like Google Home and Amazon Echo, can become a dangerous inroad for hackers.

A perfect device for eavesdropping

Introduced in February 2017, Google Home can tune into your home IoT devices while waiting to be called on - making it the perfect device for eavesdropping. Police recently requested access to an Amazon Echo device as it may have held evidence that could be useful to their case.

Over the course of 2016 Ransomware attacks earned criminals billions of Rand. Fuelled by its profitability, Ransomware attacks continue to increase, with new variants created daily.

Ransomware: more than just file encryption [part II]

Doros Hadjizenonos  11 May 2017

In Q1 PandaLabs discovered ransomware variant WYSEWYE -that allows the attacker to select and take control of specific folders on the victim’s endpoint, ultimately demanding a ransom to give back control to the victim.

For more, view the full PandaLabs report.