Security / Security Threat Trouble Spots That Emerged in Q1

Security Threat Trouble Spots That Emerged in Q1

By Gina Roos | Posted 2016-06-06

1 of

Security Threat Trouble Spots That Emerged in Q1

New ransomware variants, potentially unwanted apps disguised as software updates, and Java and Microsoft Office vulnerabilities pose new challenges.
Windows Malware Stats

Malware samples hit 340,165,702 in Q1 2016, significantly surpassing the malware-detection samples from the same period in 2015.
Malware Trouble Spots

Trojans (26%), infectors (21%), worms (15%) and exploits (1.5%) all have near constant detection rates in January, February and March.
Adware & PUA Threats

Adware and potentially unwanted applications (PUAs), combined, remained constant at about 34% for malware detection. Big threats come from potentially unwanted applications disguised as software updates, while adware samples now focus more on attacking network resources, such as Domain Name System settings, hijacking proxies and disabling the auto update feature on Web browsers.
Top Exploits

Object linking and embedding (OLE) and rich text file (RTF) format related vulnerabilities contributed to 80% of malware detection, compared to 13.5% for Java vulnerabilities.
Application Vulnerabilities

More than nine in 10 (92%) of the top exploits in Q1 2016 are attributed to Microsoft Office (76%) and Java (16%) vulnerabilities.
Distribution of Exploit Kits

Nuclear (40%) and Angler (36%) were the dominant exploit kits in Q1 2016, followed by Rig (17%).
Growth in Android Malware

178 new malware families and 275 new variants affecting the Android platform were detected in Q1 2016. This translates into a 13% increase in the number of new malware families and a 30% increase in new variants compared to Q1 2015.
Drop in Android Adware

Android Adware samples showed a 42% increase in Q1 2016, compared with a 59% increase in Q1 2015.
New Android Threats

In Q1 2016, four new ransomware variants were detected that target Android devices, including old and new families. Ten families of mobile banking Trojans also were detected, including new variants of existing families, compared to 21 in 2015.
Android Malware Samples Advance

More than 20,000 Android malware samples were detected on a daily basis, up 38 percent from Q1 2015.
View All Slideshows >

New types of TeslaCrypt ransomware, potentially unwanted applications disguised as software updates, adware attacks on network resources, and Java and Microsoft Office vulnerabilities are all creating new security challenges, according to a threat report from security solutions provider Quick Heal Technologies. The First Quarter 2016 Threat Report finds growing targeted attacks on health care and financial institutions, and a rising threat from ransomware with new variants and propagation techniques. "While malware authors constantly devise new techniques to infiltrate systems and trick unsuspecting users, IT solutions providers have to work harder to counter these attack vectors with unbreakable security mechanisms in place," the study read. Quick Heal stresses the importance of employee education about how these attacks can stealthily gain access to devices or networks, and the need to keep all applications, programs and operating systems up-to-date to protect against security vulnerabilities. The study also underscores the need for IT solution providers to deliver new security products that protect against these types of attacks. Channel Insider examines 10 takeaways from the study.