Cybersecurity Trends 2024: Q1

April 30, 2024
By Eric Wolkstein, Senior MarCom Manager at ReasonLabs

Executive Summary

Consumers spend extensive amounts of time online each day for many reasons. However, one prevailing issue among most consumers and their families is the inadequate cybersecurity measures in place to safeguard their devices and personal information. Many traditional antivirus providers lack the advanced technical offerings that match today’s AI-powered threats plaguing home users.

ReasonLabs has developed a robust endpoint protection tool called Online Security to address this need. This powerful web extension boasts a user base of nearly 20,000,000 individuals on both Google Chrome and Microsoft Edge. Online Security provides identity theft and privacy invasion protection, as well as security against next-gen cyber attacks, and more.

In the most recent report from ReasonLabs, researchers from the Threat Intelligence Center delve into cybersecurity trends 2024 extracted from data collected between January 1 and March 31, of both free and premium users of the Online Security extension. The report outlines some of the most prevalent threats identified during this period, where those threats are taking place, and offers actionable advice for home users to enhance their protection.

Cybersecurity Trends 2024: Q1

Online Security Global Detections

Malware was the top detection made in Q1 2024 on a global scale, following in the footsteps of the overall trend from 2023 where malware made up over 54% of global detections. Bucking the trend, however, was Adware, which made up only 15.5% of global detections in 2023, but is now coming in at over 28% in Q1. Phishing followed in third at just under 22%, with Cryptojacking and Ransomware following respectively.

We will delve more in-depth into these threats in subsequent sections. For now, let’s focus on the United States to examine the top detections, and provide insights into why these detections were most prevalent.

Online Security U.S Detections

We observe notable differences when comparing the global cybersecurity trends 2024 data to the United States. Phishing threats are extremely prevalent, while malware detections are nearly half as common. One factor for this might be that threat actors feel it’s easier to wage successful phishing campaigns in America than in other locations. Another is that there might be more valuable data to gain there.

Most Attacked Countries

Geography plays a significant role in shaping the characteristics, volume, and frequency of various cybersecurity attack variations as we have seen with the U.S. data compared to the global aggregate. Looking into Malware and Phishing detections, here are the countries most attacked:

One country that stands out is Ukraine. Since Russia’s invasion in 2022, there have been numerous notable cyber attacks there, and it’s clear from our data that those attacks are not only focused on government agencies and critical infrastructure but also on home users.

One country that stands out is Ukraine. Since Russia’s invasion in 2022, there have been numerous notable cyber attacks there, and it’s clear from our data that those attacks are not only focused on government agencies and critical infrastructure but also on home users.

Top Threats Afflicting Home Users

Malware

Malware encompasses any harmful software crafted to affect computer systems, networks, or devices. Cybercriminals typically develop malware to induce harm, hijack sensitive data, disrupt operations, or monetary gain. Malicious software comes in various forms and is widely distributed globally.

Malware often infiltrates systems through multiple avenues, such as malevolent email attachments, tainted software downloads, compromised websites, and more. Employing reputable antivirus and anti-malware solutions like RAV Endpoint Protection, keeping software updated, and refraining from engaging with suspicious emails or messages are vital to warding off malware.

Phishing

Phishing stands as a cybercrime tactic utilized by malicious individuals to deceive and extract sensitive information from unsuspecting individuals, including usernames, passwords, credit card details, and personal or financial data. Our analysis underscores the global prevalence of phishing attacks targeting home users, as well as the phishing tactics being utilized in cyber warfare campaigns.

The ramifications of falling victim to phishing attacks are severe, encompassing identity theft, financial losses, and various cybercrimes. While phishing commonly manifests through email, it can also exploit other communication channels like SMS messages, DMs on social media, or phone calls. Attackers frequently impersonate trusted entities such as banks, government agencies, or reputable companies to gain victims’ trust.

To fortify defenses against phishing, users should exercise caution when engaging with unsolicited emails or messages, validate website legitimacy, and employ two-factor authentication (2FA). Using a reputable password manager to update passwords with robust alternatives regularly further enhances consumer protection against phishing attempts.

Adware

Adware, short for “advertising-supported software,” can be broken down into two categories: software that drives ads outside of its scope or nefarious adware that induces harm. The latter of the two typically contains malware that can deliver unwanted advertisements onto a device, hijack a computer’s settings, such as search manners, and display potentially dangerous ads, which may unfurl into different types of malicious software.

The distribution of adware commonly occurs through malicious websites or email attachments unsuspectingly opened by users. Once installed, adware may also have the capability to gather personal information such as browsing history, preferences, or other online activities.

To safeguard against adware, it is crucial to exercise caution during software downloads and installations. Employing reputable antivirus and anti-malware solutions like RAV Endpoint Protection or utilizing DNS content-filtering services such as Safer Web, which can identify and eliminate adware infections, is paramount.

Cryptojacking

Cryptojacking represents a type of cyber intrusion wherein a hacker exploits another individual’s computer or device to mine cryptocurrencies without their knowledge or consent. Cryptocurrencies are generated via a process known as mining, which entails solving intricate mathematical problems using computational resources. Miners receive newly minted coins as rewards for their computational efforts.

Mining is a resource-intensive endeavor, demanding substantial electricity. To sidestep the expenses associated with mining, hackers deploy hostile software to contaminate devices, utilizing their capabilities for mining without the owner’s consent or even knowledge. In 2021, researchers at ReasonLabs uncovered a new crypto miner threat disseminated through pirated versions of Spider-Man: No Way Home.

As cryptojacking often operates surreptitiously without immediate discernible effects on the device, users may remain unaware of their victimization. However, it can result in diminished device performance and heightened electricity bills. To fortify defenses, users should maintain up-to-date software and security tools, employ advanced antivirus solutions like RAV EDR, and exercise caution when downloading software or accessing dubious websites.

Ransomware

Ransomware is a type of malicious software designed to encrypt files on a victim’s computer or network, rendering them inaccessible. Perpetrators then demand a ransom payment, typically in cryptocurrency, in exchange for decrypting the files and restoring access. Ransomware attacks often exploit vulnerabilities in outdated software, unsecured remote desktop protocol connections, or phishing emails containing malicious links or attachments.

Many often think ransomware is a threat faced only by organizations and government agencies. However, consumers are also at risk - in ReasonLabs’ 2024 Consumer Cybersecurity Trends Report, researchers detailed some users in South Korea affected by DPRK-backed hacker’s use of Magniber ransomware.

Individuals and organizations must adopt proactive cybersecurity measures, maintain up-to-date software and operating systems, and implement robust cybersecurity solutions to avoid falling victim to ransomware. Regular data backups to offline or cloud storage solutions are essential, as they allow users to restore their files without paying a ransom in the event of an attack.

How Consumers Can Protect Themselves

Home users can bolster their cybersecurity by utilizing essential endpoint security tools like RAV Endpoint Protection, RAV VPN, or the Safer Web DNS filter. Furthermore, ongoing education is imperative; users need to stay informed about the latest threats to effectively protect themselves. Here are some practical measures that home users can implement to strengthen their cybersecurity posture:

• Educate yourself and your family
• Employ strong and unique passwords
• Maintain software updates
• Exercise caution with emails and messages
• Secure Wi-Fi networks
• Enable two-factor authentication (2FA)
• Backup data regularly

While these steps significantly mitigate risks, it’s essential to acknowledge that no system is entirely impervious to cyber threats. Remaining vigilant and cultivating sound cybersecurity habits are ongoing endeavors.

For more information about ReasonLabs and our suite of cybersecurity products, visit https://reasonlabs.com.