Business Daily Media

OpenText Security Solutions Announces Nastiest Malware of 2022

  • Written by Business Daily Media


Analysis Reveals the Emergence of Triple Extortion and a Possible End to the Hacker Holiday 

OpenText™ (NASDAQ: OTEX), (TSX: OTEX), today announced the Nastiest Malware of 2022, a ranking of the year’s biggest cyber threats. For the fifth year running, OpenText Security Solutions’ threat intelligence experts combed through the data, analysed different behaviours, and determined which malicious payloads are the nastiest. Emotet regained its place at the top, reminding the world that while affiliates may be taken down, the masterminds are resilient. LockBit evolved its tactics into something never seen before: triple extortion. Analysis also revealed an almost 1100% increase in phishing during the first four months of 2022 compared to the same period in 2021, indicating a possible end to the “hacker holiday,” a hacker rest period following the busy holiday season.

 “The key takeaway from this year’s findings is that malware remains centre stage in the threats posed towards individuals, businesses, and governments,” said Muhi Majzoub, EVP and Chief Product Officer, OpenText. “Cybercriminals continue to evolve their tactics, leaving the infosec community in a constant state of catch-up. With the mainstream adoption of ransomware payloads and cryptocurrency facilitating payments, the battle will continue. No person, no business—regardless of size—is immune to these threats.” 

While this year’s list may designate payloads into different categories of malware, it’s important to note many of these bad actor groups contract work from others. This allows each group to specialise in their respective payload and perfect it. 

2022 Nastiest Malware

Emotet remains the most successful botnet in existence, following a brief shutdown last year. Its job is to send malspam campaigns to billions of emails a day. It creates a foothold on a victim's computer, with follow-up malware that will then move laterally and compromise the rest of the environment before bringing in the final payload of ransomware.

LockBit is this year's most prolific and successful ransomware group. While the group has been around for about three years as a ransomware-as-a-service (RaaS) group, they continue to advance their tactics. In addition to taking data, holding it for ransom and threatening to leak it, triple extortion adds a third layer: a distributed denial-of-service (DDoS) attack on an entire system to completely lock it down.

Conti, a RaaS malware, has been on the Nastiest Malware radar for quite some time. In February, Conti released a statement of support on their leak site for the Russian government. Shortly after a twitter account, Conti leaks, leaked Conti’s internal chats dating back almost two years resulted in the dismantling of their leak site and command and control servers. Conti has since rebranded into multiple operations, most notably HelloKitty, BlackCat, and BlackByte.

Qbot (AKA Qakbot), possibly the oldest info-stealing trojan, still receives updates today. It moves throughout the network and infects the entire environment while “casing the joint” to allow access to as much data as possible to exfiltrate for extortion and to prepare for the final stage of ransomware payloads.

Valyria is another strain of a used-to-be banking trojan turned into malspam botnet with email attachments, turned into malicious scripts that starts an infection chain typically resulting in ransomware. The tricky part about Valyria is the complexity of the components and its ability to evade detection.

Cobalt Strike and Brute Ratel are adversarial attack simulation tools. Cobalt Strike is a pen testing tool designed by white hats; Brute Ratel was created for red teams. The purpose of these tools is to help teams simulate attacks to understand the tactics hackers use, determine security gaps, and make the appropriate changes. Not surprising, Cobalt Strike, and now Brute Ratel, are frequently used by the bad guys.  

To learn more about the findings of this year’s Nastiest Malware analysis, visit Webroot Community.

Business Reports

Cash Flow Uncertainty from Australian Small Business Owners is Impacting their Mental Wellbeing

Released today, American Express’ Working Capital Research1 explores the impact cash flow uncertainty has on the mental health and wellbeing of Australian small business owners2 (SBOs).   The report found that 49% of SB...

4 Tips For Planning a Work Conference

Planning a work conference can be extremely exciting, yet also quite stressful. Some say that it can even be on par with planning a wedding, So, it's important that you have the right elements in place since unfortunately, man...

HSBC Chief Economist: Travel a bright spot amid global challenges

Paul Bloxham reveals key insights from his upcoming keynote talk at Flight Centre Corporate’s #Illuminate2022 conference  Amid the global challenges of high inflation, supply chain disruptions and the conflict in Ukraine...

Unit4 Signs New ISV Partnership with eConnect

Unit4, a leader in enterprise cloud applications for people-centric organisations, today announced that it has signed a new partner deal with eConnect International, a Dutch market leader in multi-channel invoice and ord...

Recovery from a disaster like Hurricane Ian takes years, and nonprofits play many pivotal roles before and after FEMA aid runs out

The rebuilding in places like Matlacha, Fla., won't happen overnight.AP Photo/Gerald HerbertMassive storms like Ian and Fiona mark the beginning of a long and frustrating process for anyone who loses their home and possessions.Rec...

Bandits are losing interest in robbing banks, as some crimes no longer pay

John Dillinger, played by Warren Oates (pictured) in the 1973 film 'Dillinger,' allegedly robbed 24 banks.Bettmann via Getty ImagesBank robbery is a high-profile crime that fascinates many people.Movies have been made about famous...

Web Busters - Break into local search

WebBusters.com.au