#cybercrimeinformationcenter — Public Fediverse posts

Malware Activity for the April-June 2024 quarter is now available at the Cybercrime Information Center

The April - June 2024 time period was a busy one for malware actors.

Sites reported for hosting endpoint malware and IoT malware increased more than twofold (227% and 235%, respectively.

We again identified more than 1 million unique IPv4 addresses as sources for malicious traffic (attackware and traffic injectors). Unique domain names used to host malware dropped but this had no impact on overall malware activity.

Malware is increasingly “Powered by WordPress”
WordPress blog sites used for malware accounted for nearly all the malicious documents reported this period.

Operators in China and India continue to top our list of ASNs with most IPv4 addresses reported for hosting malware.

https://www.cybercrimeinfocenter.org/malware-activity-numbers-april-june-2024

https://www.cybercrimeinfocenter.org/malware-trends-april-june-2024

#malware #cybercrime #cybercrimeinformationcenter

My interview with the #spamhausproject

Trends, policy and cheap TLDs - an interview with Dave Piscitello
https://www.spamhaus.org/resource-hub/cybercrime/trends-policy-and-cheap-tlds-an-interview-with-dave-piscitello/

I've had the pleasure of working with the Spamhaus Team for nearly 2 decades. We collect their reputation data in our #cybercrimeinformationcenter along with a dozen other feeds.

We had a lively discussion about the findings from our October 2023 Cybercrime Supply Chain study. My interview augments our study findings. Hope you enjoy it.

#phishing #malware #spam #domainabuse #dnsabuse

@hackerfactor @thedarktangent Next month we publish a malware landscape study using data from the #cybercrimeinformationcenter. We are including malicious IPs, e.g., attackware and traffic injectors. The numbers are crazy high. Your instincts are good.

@Weld To some extent, an org that's using one or more URLBLs or DBLs would get this protection; for example, the blocklists that we ingest for our #cybercrimeinformationcenter measurements list the typosquatted domains used as examples in the article.

I'd be more worried that my employees were trusting cloud drives.

My AWPG eCrime 2022 Symposium presentation on taxonomic conventions for cybercrime measurements is available at https://cybercrimeinfocenter.squarespace.com/s/The-Need-for-Clarity-Accuracy-and-Rigor.pdf

#cybercrime #phishing #malware #apwg #cybercrimeinformationcenter

Short video discusses how #phishing activity in a single address allocation made an entire #ASN look bad in our #cybercrimeinformationcenter May-July 2022 data.

World's Phishiest Neighborhoods
https://www.youtube.com/watch?v=oH0MusGmhc4

If you like this, we'll do it again for August-October

Working this week on a comment to this proposed FTC ruling on (criminal) #impersonation of government and businesses

We're providing counts of #phishing attacks against recognized brands and gov agencies (e.g., IRS) and counts of domains reported for phishing that contained brands or agency names from our #cybercrimeinformationcenter

https://www.federalregister.gov/documents/2022/10/17/2022-21289/trade-regulation-rule-on-impersonation-of-government-and-businesses