Avast, a global firm in digital security and privacy, looks back at the prevalent cyberthreats of 2021. Cybercriminals continued to take advantage of the Covid-19 pandemic, exploiting people’s habits formed during lockdown to spread scams. Ransomware, cryptocurrency malware and scams continued to prevail, and on the mobile side, adware and fleeceware were among the top threats.
“The pandemic has changed nearly every aspect of everyone’s lives, and that includes the cyberworld too,” said Michal Salat, Director, Threat Intelligence, Avast. “Attackers’ methods are becoming more sophisticated. Cybercriminals are using techniques that make them harder to spot and carrying out more personalised cyber attacks. They are also adding new spins on tried and tested techniques, especially in social engineering type of attacks like scams,” added Salat.
Businesses globally also experienced an increased number of attacks during the past five months of the year (June-October) to the tune of 32 per cent. However, for India, this number was less than the global average and stood at 19 per cent. Cybercriminals persisted to use the pandemic to their advantage, spreading scams and phishing a
Earlier this year, Avast researchers saw a flood in sextortion scams with over 500,000 sextortion scams blocked. This campaign takes advantage of the increased use of video conferencing services during the Covid-19 pandemic, falsely claiming to have accessed a user’s device and camera. Users in several countries have also been receiving SMS messages linking to a banking Trojan called “FluBot”, which impersonates parcel delivery companies in order to steal credentials and other personal data, and being targeted by tech support scams. These trick victims into believing their computer has been infected by malware and that their only recourse is to call a phone hotline for technical support, which in reality is unnecessary.
In general, phishing attacks continued to increase during 2021. The chances of businesses encountering phishing scams has increased globally by 40 per cent in the last five months (June-October) but was much lower in India with 13 per cent. Consumers, too, continue to be targeted by phishing scams with the increase in global (24 per cent) and India (23 per cent) figures being nearly the same.
This year, our Threat Labs team identified a wide variety of new threats aimed at profiting from or mining cryptocurrencies at users’ expenses. Some of the main ones that impacted many countries around the world were Crackonosh, and BluStealer. The former was included in cracked versions of major games, and is a cryptocurrency mining malware. The latter, BluStealer is a keylogger, document uploader and cryptocurrency thief in a single malware that, like FluBot, took advantage of people ordering online during the pandemic and spread through a malicious spam campaign (malspam).
Adware still is the most significant threat on Android phones and tablets in the world. Globally, 54.7 per cent of mobile threats detected from January to September were adware. Fake apps came in second at 10 per cent, banking Trojans in third with 9.6 per cent, followed by downloaders with 7.5 per cent and spyware with 2.3 per cent.
Fleeceware apps also proved to be a serious concern to users in 2021. Avast discovered more than 200 new fleeceware applications on the Apple App Store and the Google PlayStore. These apps promised free trials but ended up extracting hundreds of dollars from their users through subscription services. Most recently, Avast discovered fraudulent sites masquerading as national postal services from various countries in Europe, including retail shops from the Czech Republic, Russia, Sweden and the Ukraine.
Risks to users were not only originated by bad actors in 2021. Early September, Avast researchers found more than 19,300 Android apps that potentially exposed user data due to an incorrect configuration of the Firebase database – an Android tool that developers can use with the purpose of storing user data. This affected a wide range of different apps, including lifestyle, fitness, gaming, food delivery and mailing apps in regions around the world and exposed Personally Identifiable Information (PII) such as names, addresses, location data and, in some cases, even passwords.
“Cybercriminals kept up many of their tricks this year, using social engineering to spread malware to get their hands on people’s money, abusing technology such as stalkerware to violate people’s privacy or deceiving vulnerable audiences into paying for fleeceware apps or unneeded tech support. We are seeing increasing online harms that affect how people experience the digital world. Everyone is being targeted, from everyday users to hospitals and oil pipelines to food companies globally. We hope by raising awareness around what we observed this year, we can help prevent people from falling victim in 2022,” concluded Salat.