Emotet, a form of malware previously classified as a banking Trojan but now considered a botnet, made up 61% of all payloads in the first quarter of 2019, Proofpoint researchers report.
The data comes from Proofpoint's "Q1 2019 Threat Report." Researchers who have been tracking Emotet's evolution say its popularity is reflected in the growth of attacks using malicious URLs. In the first quarter of 2019, emailed cyberattacks using bad links outnumbered those packing malicious attachments by five to one — up 180% from the first quarter of 2019, they report.
"The massive shift in Emotet's prevalence and classification highlights just how quickly cybercriminals are adapting new tools and techniques across attack types in search for the largest payday," says Sherrod DeGrippo, senior director of threat research and detection at Proofproint. Indeed, Emotet's operators added more capabilities earlier this year as they continued to build Emotet from a Trojan meant to lift banking data to a threat delivering data-stealing payloads.
Emotet frequently downloads additional modules for sending spam and downloading additional malware. This caused a change in classification, as well as increases in the volume of messages trying to install Emotet. As a result, researchers saw a significant change in the volume of messages by malware family: 61% of payloads were botnets, and all of them were Emotet. The threat is responsible for the inclusion of the "botnet" category in 2019, during which Emotet has displaced credential stealers, stand-alone downloaders, and remote access Trojans (RATs) in the threat landscape.
Volumes of downloaders, stealers, and RATs fell 11, 8, and 7 percentage points, respectively, as Emotet jumped 26%. The widely distributed threat is available in malware-as-a-service fo ..
Support the originator by clicking the read the rest link below.
