New Mimecast report analyses data of 67 billion rejected emails
According to their report, Trojans made up 71% of opportunistic attacks.
Email and data security company Mimecast launched its first Threat Intelligence Report: Black Hat Edition on Thursday. The report is said to provide technical analysis of emerging threats identified as attempts to get through the security environment of its customers. Covering a period between April and June this year, the threat intelligence report is reported to have leveraged the processing of nearly 160 billion emails, 67 billion of which were rejected for displaying malicious attack techniques.
A significant increase in impersonation attacks was observed, leveraging well-known basic social engineering techniques to target individuals for fast and easy financial gain. The report cites that threat actors are adapting how they engage their targeted victims, initiating through email first, then shifting to SMS, a less secure communications channel. On the other hand, an increasing amount of more complex targeted attacks using obfuscation, layering and bundling of malware were often used. Researchers found that threat actors using these types of attacks are familiarizing themselves with their target’s security environment, then implementing multiple evasion techniques in efforts to avoid detection.
The report also reportedly gives specific examples of emerging threats, active threat campaigns observed, primary threat categories and volume, and the top targeted sectors. A large number of known malware campaigns were observed, including ones incorporating Emotet, Adwin, Necurs, and Gandcrab malware. Microsoft Excel was one of the most popular file types used to distribute malicious activity, as more than 40% of threats detected were using files associated with it. File types associated with Microsoft Word were seen in nearly 15% of threats.
“The cyberthreat landscape will continue to evolve as threat actors continue to look for new ways to bypass security channels to breach their targets. We’ve observed malware-centric campaigns becoming more sophisticated, often using different types of malware in different phases of an attack – yet, at the same time very simple attacks are also increasing significantly,” said Josh Douglas, vice president of threat intelligence at Mimecast. “The mission of the Threat Intelligence Report is to help organizations better understand the global threat landscape, so they can make more informed decisions on how to strengthen their security posture.”