Kaspersky reports rise in malware threats & attacks in 2024

Kaspersky's detection systems identified an average of 467,000 malicious files daily in 2024, showing a 14% increase from 2023, according to the company's latest Security Bulletin.

Kaspersky's annual Security Bulletin highlighted noteworthy trends in cybersecurity threats, noting that malicious files disseminated through scripts and varied MS Office document formats comprised 6% of the daily threats. There was also a notable 150% increase in the use of Trojan-droppers, which are software designed to stealthily deliver malware to victims' computers or phones.

Windows was the primary target for these cyberattacks, accounting for 93% of all malware detected by Kaspersky systems each day. In addition, the malware most often detected were Trojans, which disguise themselves as legitimate software applications, with a 33% rise from the preceding year.

Vladimir Kuskov, Head of Anti-Malware Research at Kaspersky, stated, "The number of new threats grows every year as adversaries continue to develop new malware, techniques and methods to attack users and organizations. This year was no exception to this, and there were dangerous trends observed, such as attacks on trusted relationships and supply chains, including those on open-source packages (e.g., the XZ case). There were massive phishing and malicious campaigns targeting social media users and a rise in banking malware. And, of course, the use of AI tools to generate new malware or facilitate phishing attacks. In this evolving cyber threat landscape, the use of reliable security solutions is vital. Kaspersky experts are always dedicated to countering new and challenging cyberthreats, ensuring a secure online experience for users as well as robust cybersecurity and the latest threat intelligence for organizations."

Kaspersky advises individuals not to download applications from untrusted sources and to avoid clicking on suspicious links. Users are encouraged to employ two-factor authentication and use strong, unique passwords managed by a reliable password manager. Regular software updates and robust security solutions like Kaspersky Premium are also recommended.

For organisations, Kaspersky suggests maintaining updated software across all devices to prevent vulnerabilities. Remote desktop services should not be exposed to public networks, and strong passwords should always be used. The company recommends solutions such as Kaspersky NEXT EDR Expert to ensure comprehensive visibility and defence across corporate networks.

To further protect corporate data, regular backups that are isolated from networks are advised, ensuring swift access in case of emergencies. Keeping abreast of actual TTPs used by threat actors with the latest Threat Intelligence information is also deemed essential.