E-commerce CRO

Gen Reveals 24% Rise in Ransomware Attacks on Consumers

Recent insights from Avast, a prominent security and privacy brand under Gen, have highlighted a troubling trend: a 24% rise in ransomware attacks targeting consumers quarter over quarter. The inaugural Gen Threat Report consolidates data from previously separate reports, including the Norton Pulse Report and Avast Quarterly Threat Report, painting a comprehensive picture of the threat landscape that consumers are increasingly facing.

This surge is most pronounced in specific regions, with India witnessing a staggering 379% increase. The United States, Canada, and the United Kingdom are other notable mentions, each experiencing a 100% rise in ransomware incidents. Such figures underscore that ransomware is not merely a corporate threat but a growing concern for individuals as well.

The report reveals the leading ransomware strains affecting consumers. WannaCry dominates the landscape, representing 21% of reported incidents, while other notable strains include Cylance (9%), Enigma (8%), STOP (6%), LockBit (5%), and Mallox (2%). These statistics serve as a reminder of the necessity for individuals to remain vigilant against such attacks.

Jakub Kroustek, Director of Malware Research at Gen, noted a concerning trend in how cybercriminals delivery ransomware. A popular method involves concealing ransomware payloads within pirated content. This tactic highlights the need for consumers to exercise extreme caution when accessing online content, particularly from unreputable sources. Furthermore, Kroustek pointed to the methods used by these criminals, which now include fileless malware and double extortion schemes. The latter involves encrypting victims’ data while simultaneously threatening to release sensitive information unless a ransom is paid.

One cannot overlook the alarming reality that ransomware groups target a diverse array of victims, including individuals, organizations, and governmental bodies. This broad targeting reinforces the importance of consumer protection just as much as corporate defense strategies.

In response to the escalating ransomware crisis, Avast researchers are collaborating with governments across the globe. Their efforts have led to the development of multiple decryptors aimed at assisting victims in recovering their data. Notably, the recently launched Avast DoNex Ransomware Decryptor stands as a critical tool for those who find themselves ensnared in a ransomware attack.

The Gen Threat Report also sheds light on emerging trends in the cyber threat landscape for the second quarter of 2024. A major highlight is the increasing use of generative AI by cybercriminals. According to Siggi Stefnisson, Chief Technology Officer at Gen, scammers have become more adept at capitalizing on current consumer interests, making their schemes even more persuasive. Understanding this new landscape, where AI strengthens attacks, is paramount for consumers seeking to protect themselves.

Scammers have not only modernized their techniques but also revived old methods with a technological twist. For instance, the CryptoCore scam group successfully employed deepfake technology, creating convincing impersonations of legitimate events on compromised YouTube accounts to promote fake cryptocurrency giveaway schemes. Such tactics have led to significant financial losses for unsuspecting victims.

The economic challenges many individuals face have further fueled the rise of part-time job scams. These deceptive schemes, which promise easy earnings for simple tasks, have evolved from traditional text-based interactions to sophisticated AI-generated voice communications, complicating detection and response efforts.

Of particular concern is the revival of antivirus scams. Cybercriminals are utilizing aggressive pop-up alerts that mimic authentic antivirus programs, tricking individuals into purchasing fraudulent software. In a similar vein, the threat of digital identity theft remains rampant. Attackers deploy InfoStealers and Mobile Bankers to directly extract sensitive information from consumers’ devices.

In the second quarter of 2024, malware such as TeaBot targeted users of financial platforms like Revolut. Spyware threats like XploitSpy and AridSpy were also noted for infiltrating the PlayStore, stealing files, and monitoring users through both their cameras and microphones.

The takeaways from the Gen Threat Report are stark: the rise in ransomware attacks calls for heightened awareness and proactive measures. For everyday consumers, this translates into the need for comprehensive digital security practices, including regular software updates, the use of robust antivirus solutions, and a keen sense of skepticism regarding unsolicited communications or content from unknown sources.

As cybercriminals continue to evolve their strategies, the responsibility falls to consumers to educate themselves about the risks involved and take necessary precautions. Each individual must remain alert to the ever-changing threat landscape and prioritize their cybersecurity hygiene to safeguard personal information and assets.