2024年恶意软件状况报告：从恶意软件到威胁全面防御指南 英文版 .docxVIP

Partner

2024

StateofMalwareFrommalwaretothreats,acomprehensivedefenseguide

Contents

1.Whyorganizationsneedaguide......3

2.Lessonslearnedfrom2023..........4

3.Biggameransomware............... 6

4.Malvertising.......................10

5.Zero-dayransomware..............14

6.LivingOffTheLand................18

7.Androidbankingtrojans............21

8.NewMacmalwaretactics........... 25

9.Howorganizationscanprepare...... 28

10.IntroducingThreatDownBundles....29

2024StateofMalware 2

Contents

1.Whyorganizationsneedaguide

Frommalwaretothreats

Cybercrimeisathrivingandhighlyorganizedbusiness—amulti-billion-dollarmirrortothelegitimateeconomyitfeedsoff.Itsecosystemsupportsentiresupplychainswhicharedottedaboutwithspecializedorganizationslikeaccessbrokersandmalicioussoftwarevendors.It

hasbrandnames,PRstunts,HRdepartments,incentiveschemes,and“employeesofthemonth.”

Andlikebroader,law-abiding“Business”atlarge,cybercrimehassettledonacollectionoftoolsthatwork.SitataregulardesktopcomputerintheUSorEuropeandyou’llseesoftwarethatwouldhavebeenfamiliar15yearsagosuchasMicrosoftWindows,Office,andawebbrowser.

Cybercrimehasinfostealers,phishing,andransomware.LikeWindowsandOffice,theyarematureandeffective,andforyearsthelatestiterationshaveonlyofferedmarginal

improvementsontheirpredecessors.Asaresult,innovationincybercrimehasincreasinglyshiftedtowardstactics—advancementsthatfocusmoreonhowattackscansucceedandlessonwhat

malwarecando.

Malwareisasdangerousasever,butwhenitisused,itisjustonelinkinanattackchainofmultipledifferentthreats.ITandsecurity

teamsnowface“LivingOffTheLand”(LOTL)attacks,activeadversaries,zero-dayexploits,compro