Kaspersky’s detection systems have reportedly discovered an average of 467,000 malicious files per day in 2024, marking a “14% increase” compared to the previous year.
Certain types of threats saw significant growth with experts “reporting a 33% surge in Trojan detections compared to 2023.”
These and other important findings are described in the Kaspersky Security Bulletin (KSB) – a series of reports which are said to be analyzing major “developments in the cybersecurity landscape.”
Windows continued to be the primary target for cyberattacks, “accounting for 93% of all malware-filled data detected daily.”
Malicious families disseminated through various scripts and different MS Office document formats ranked “among the top three threats, accounting for 6% of all malicious files detected daily.”
Kaspersky’s detection systems discovered a significant “increase in Windows malware – 19% from 2023 to 2024.”
The most widespread type of malware continues to be Trojans – malicious programs that disguise themselves as “legitimate software – with a surge of 33% from 2023 to 2024.”
There has also been a 2.5-fold (150%) increase in the “use of Trojan-droppers – programs designed to deliver other malware to a victim’s computer or phone without the victim noticing.”
Vladimir Kuskov, Head of Anti-Malware Research at Kaspersky:
“There were massive phishing and malicious campaigns targeting social media users and a rise in banking malware. And, of course, the use of AI tools to generate new malware or facilitate phishing attacks.”
These discoveries are based on Kaspersky detections of malicious files from January to October and are part of Kaspersky Security Bulletin (KSB) – an annual series of predictions and analytical reports “on key shifts within the cybersecurity world. Follow this link to learn more about cyberthreat statistics for 2024.”
Individual users:
- Do not download and install applications from untrusted sources
- Do not click on any links from unknown sources or suspicious online advertisements
- Always use two-factor authentication when available. Create strong and unique passwords, using a mix of lower-case and upper-case letters, numbers, and punctuation. Use a reliable password manager to help to remember them
- Always install updates when they become available; they contain fixes for critical security issues
- Ignore messages asking to disable security systems for office or cybersecurity software
- Use a robust security solution appropriate to your system type and devices, such as Kaspersky Premium
Organizations:
- Always keep software updated on all the devices you use to prevent attackers from infiltrating your network by exploiting vulnerabilities
- Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them
- Use solutions such as Kaspersky NEXT EDR Expert for comprehensive visibility across all endpoints on a company’s corporate network to get superior defense, automate routine EDR tasks, enable analysts to speedily hunt out, prioritize, investigate, and neutralize complex threats and APT-like attacks
- Use the latest Threat Intelligence information to stay aware of actual TTPs used by threat actors
- Back up the corporate data regularly. Backups should be isolated from the network. Make sure you can quickly access the backups in an emergency if needed
As covered, Kaspersky is a cybersecurity and digital privacy company founded in 1997.
With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly “transforming into solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe.”
The company’s security portfolio includes leading endpoint protection, specialized security products and services, as well “as Cyber Immune solutions to fight sophisticated and evolving digital threats.”
They help over 200,000 corporate clients “protect what matters most to them.”