Thursday, January 30, 2025
HomeComputer SecurityProofpoint Q2 Threat Report - Ransomware Returns, Growth in Social Engineering and...

Proofpoint Q2 Threat Report – Ransomware Returns, Growth in Social Engineering and Email Fraud

Published on

SIEM as a Service

Follow Us on Google News

According to Proofpoint Q2 Threat Report, the malicious message volume increased by 36% in the second quarter of 2018 and the ransomware returns back with new versions of GandCrab, Sigma, and GlobeImposter campaigns. Banking Trojans remained the top payload in the second quarter of 2018

Social engineering schemes such as fake antivirus and browser plugins and cryptojacking spiked in the second quarter of 2018. Support fraud grows by 38% and 30% increase in phishing links on social media.

Threat Report

Email Based Threat Report

The Q2 report says the malicious email message volume increased by 36% when compared to Q1 of 2018, with the second quarter mostly the campaign relies on the URLs instead of attachments.

The return of ransomware which is absent in the Q1 of 2018 and returns to more regular campaign within the second quarter. The remote access Trojans doubled their footprints in the second quarter of 2018.

Banking trojans as the top payload accounted for around 42% and it has been decreased by 17% as the ransomware campaign picks up.

Email fraud campaigns increased over 87% in the second quarter and it targets industries such as industries such as retail, healthcare, and government.

Threat Report

Subject lines also have been changed with the recent campaigns by attackers to increase the click-through rate. In 2018 14.2 percent of spam that delivered in the inbox are clicked.

Web-based Threat Report

Neutrino and RIG exploit kits continue to dominate and the RIG kit started using combinations of both phishing and malware attack to infect machines.

Neutrino and RIG exploit kits continue to dominate and the RIG kit started using combinations of both phishing and malware attack to infect machines.

Threat Report

The fake antivirus and browser plugins continue to grow rapidly in the second quarter. Attackers continue to inject coinhive scripts into a number of websites to mine cryptocurrency.

Social Media Threat Report

Social media threats continue to grow rapidly in the second quarter, attackers attempt to insert themselves in legitimate conversations to pass spoofed links and the tech support scams. Support scam activities have grown by 38% in Q2, but starting from June there is a seasonal dip.

Proofpoint researchers also detected a 30% increase in phishing links on social media. Social media accounts continue to be propagation channel for these kinds of threats, for Worldcup itself more than 250 accounts created representing the brands.

Proofpoint published the report and you can access the threat report here.

Also Read

How To Respond Cyber Incident In your Organization

Most Important Steps to Prevent Your Organization From Identity Theft -Detailed Explanation

WhatsApp & Telegram Accounts Compromised By New Vulnerability that Allowed Hackers to Take over Hundreds of Millions of Accounts

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

10,000 WordPress Websites Hacked to Distributing MacOS and Microsoft Malware

Over 10,000 WordPress websites have been hijacked to deliver malicious software targeting both macOS...

New RDP Exploit Allows Attackers to Take Over Windows and Browser Sessions

Cybersecurity experts have uncovered a new exploit leveraging the widely used Remote Desktop Protocol...

New SMS-Based Phishing Tool ‘DevilTraff’ Enables Mass Cyber Attacks

Cybersecurity experts are sounding the alarm about a new SMS-based phishing tool, Devil-Traff, that...

DeepSeek Database Publicly Exposed Sensitive Information, Secret Keys & Logs

Experts at Wiz Research have identified a publicly exposed ClickHouse database belonging to DeepSeek,...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Hackers Could Bypassing EDR Using Windows Symbolic Links to Disable Service Executables

A groundbreaking technique for exploiting Windows systems has emerged, combining the "Bring Your Own...

Beware of Fake Captcha Verifications Spreading Lumma Malware

In January, Netskope Threat Labs uncovered a sophisticated global malware campaign leveraging fake CAPTCHA...

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed

Salt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People's Republic...