2020年恶意软件威胁态势报告（英文版）_57页_5mb

2020 State of Malware Report Summary

Core Content

The 2020 State of Malware Report by Malwarebytes provides an in-depth analysis of the global malware threat landscape in 2019. It highlights trends, increases in specific malware types, and the evolution of cybercriminal tactics across different platforms and regions. The report also touches on the growing concern around data privacy following the implementation of GDPR and other legislative changes.

Key Takeaways

• Overall Threat Volume: Malware detections increased by 1% globally in 2019 compared to 2018.
• Business vs. Consumer:
  • Consumer threat detections decreased by 2%.
  • Business threat detections increased by 13%, indicating a growing focus of cybercriminals on enterprise targets.
• Adware Dominance:
  • Adware remained the most prevalent threat category for both consumers and businesses.
  • It saw significant growth in 2019, with HackTools increasing by 42%.
• Ransomware Trends:
  • Ransomware detections slightly declined from 2018, but new families like Ryuk, Sodinokibi, and Phobos became more prominent.
  • Ryuk increased by 543% from Q4 2018, and Sodinokibi saw an 820% increase since its introduction in May 2019.
• Macs Outperform Windows:
  • For the first time ever, Macs outpaced Windows PCs in threats detected per endpoint.
  • Mac threat detections increased by over 400% from 2018.
• Regional Threats:
  • NORAM (North America) accounted for 48% of all detections.
  • EMEA (Europe, Middle East, and Africa) saw a 2% decrease in threats.
  • LATAM experienced the most growth with an 8% increase in threat volume.

Windows Threat Landscape

• Global Detections:
  • Total malware detections: 50,510,960 in 2019 (up 1% from 2018).
  • Business endpoints: 9,599,305 (up 13%).
  • Consumer endpoints: 40,911,655 (down 2%).
• Top Threat Categories:
  • Adware remained the top threat for consumers.
  • Adware also surged in business detections, increasing by 463%.
  • Trojan activity declined by 25% in business detections.
• Top Threat Families:
  • Adware.MindSpark and Adware.InstallCore saw massive increases (497% and 367% respectively).
  • Adware.SearchEncrypt increased by 1730%.
  • Trojan.Emotet and Trojan.TrickBot were among the most active, with Emotet up 375% and TrickBot up 52%.

Mac Threat Landscape

• Macs Outpaced Windows: For the first time ever, Macs had more threats per endpoint than Windows.
• Adware Dominance: NewTab was the top threat on Macs, with 28 million detections.
• Threat Growth: Mac threat detections increased by over 400% from 2018.
• Region Focus: While the overall increase was due to a growing userbase, the threat landscape for Macs was also becoming more complex.

Android Threat Landscape

• Pre-installed Malware: A rise in pre-installed malware and adware on Android devices was observed.
• Stalkerware: Malware that enables user monitoring (stalkerware) was a growing concern, with HiddenAds being a notable example.
• Adware Activity: Adware was a major threat on Android, often used to hijack browsers and redirect traffic for profit.

Web Threat Landscape

• Web Skimmers: Groups like MageCart were responsible for stealing financial information through compromised payment processors.
• Exploit Kits and Malvertising: These were also significant threats, with a notable increase in activity.
• Chromium Platform Concerns: The shift to Chromium-based browsers raised concerns about new exploit development.

Cybersecurity Predictions and Trends

• Increased Sophistication: Cybercriminals are using more advanced techniques, including multi-stage attacks and evasion methods.
• Data Privacy Focus: Data privacy became a major public and legislative concern in 2019, with new laws in the U.S. and increased focus from tech companies.
• Privacy Blunders: Major tech companies like Google, Amazon, and Facebook faced criticism for mishandling user data.
• Future Outlook: Adware and ransomware are expected to remain major threats in 2020, with increased focus on business targets.

Conclusion

The 2019 threat landscape showed a clear shift towards business-focused attacks, with adware and ransomware dominating both consumer and enterprise environments. Emotet and TrickBot were particularly active, evolving from simple banking Trojans to powerful botnets. The rise in stalkerware and web skimmers highlighted the growing complexity and variety of cyber threats. Meanwhile, the Macs outperforming Windows in threat detection marked a significant change in the cybersecurity landscape. The report concludes with a strong emphasis on the need for improved data privacy measures and continued vigilance against evolving malware tactics.