Trends in Cyber Threats: A Dual Perspective on Malware and DDoS Attacks

According to the latest Webroot Quarterly Threat Report, users encountered malware 20% less frequently in the first half of 2016 compared to the same period in 2015. Despite this decline, the nature of cyber threats is evolving, with attacks becoming increasingly sophisticated and often disappearing shortly after achieving their objectives. Tyler Moffitt, a senior threat research analyst at Webroot, emphasized that while malware encounters are decreasing, the cybercrime landscape remains active, necessitating the adoption of advanced security measures that can adapt to evolving malware behaviors.

Malware attacks are declining but getting clevererDDoS traffic soars and the bots get cleverer

The report highlights a significant increase in phishing attacks targeting major companies, particularly Google and Wells Fargo, which saw a sharp rise in attacks starting in May 2016. Phishers are employing polymorphic URLs to evade traditional detection methods, allowing them to target multiple users simultaneously. Furthermore, the United States now hosts over 40% of malicious URLs, a trend attributed to the high number of legitimate websites, complicating efforts to block malicious traffic effectively. The report also notes a projected 400% increase in new malicious Android applications in 2016, primarily targeting Asia, where many users download apps from unofficial sources.

Malware attacks are declining but getting clevererDDoS traffic soars and the bots get cleverer

Research from Incapsula reveals a staggering 240% increase in application-level DDoS bot traffic over a five-month period, with over 154 million DDoS bot sessions analyzed. Notably, more than 25% of all botnets are located in India, China, and Iran, while the United States ranks fifth among the top ten countries contributing to DDoS attacks. The data indicates a shift towards "hit and run" attacks, characterized by short bursts of traffic designed to exploit vulnerabilities in security systems.

DDoS traffic soars and the bots get clevererMalware attacks are declining but getting cleverer

The report also highlights the prevalence of multi-vector attacks, which account for nearly 81% of all DDoS incidents. These attacks often serve as smokescreens, diverting attention from the primary attack vector. Additionally, the sophistication of DDoS bots has increased, with 30% of encountered bots capable of bypassing common filtering methods by accepting and storing cookies. This evolution in bot capabilities underscores the need for enhanced security measures to defend against increasingly complex DDoS threats.

DDoS traffic soars and the bots get clevererMalware attacks are declining but getting cleverer

Both Webroot and Incapsula emphasize the necessity for organizations to adopt next-generation security approaches. Webroot's report calls for adaptive security measures to counteract the evolving nature of malware, while Incapsula highlights the importance of robust defenses against the growing sophistication of DDoS attacks.

DDoS traffic soars and the bots get cleverer

Some cybersecurity experts argue that while the reports indicate a decline in malware encounters, the increasing sophistication of attacks may lead to a false sense of security among organizations. They caution that the focus on quantitative metrics, such as the number of encounters, may overlook the qualitative aspects of evolving threats.

Malware attacks are declining but getting cleverer

While Webroot reports a decline in malware encounters, Incapsula's findings indicate a significant rise in DDoS bot traffic. This discrepancy highlights the complexity of the cyber threat landscape, where different types of attacks may be experiencing divergent trends.

DDoS traffic soars and the bots get cleverer

• "The report data demonstrates that, while malware encounters may be on a downturn, the business of cybercrime is indeed alive and well." — Tyler Moffitt, Senior Threat Research Analyst, Webroot

Malware attacks are declining but getting cleverer

• "The growth in multi-vector attacks is also being used to create 'smokescreens' where one attack creates noise to divert attention away from the main vector." — Incapsula Report

DDoS traffic soars and the bots get cleverer

This analysis underscores the dynamic nature of cyber threats, revealing a landscape where traditional metrics may not fully capture the evolving challenges organizations face in securing their digital environments.

Malware attacks are declining but getting cleverer