The G DATA CyberDefense threat analysis shows that the number of infections prevented in March 2020 increased by about 30 percent compared to the previous month. And the increase among private users was even higher - the number of averted attacks rose by 46 percent. This enormous growth is also related to the fact that people are spending more time at home and are using private devices online more often, for instance to check the latest news or to order goods in online shops. Private computers are often less well secured than computers in corporate networks.
Cyber criminals are using various ways to exploit the current uncertainty caused by the coronavirus crisis. For example, they are luring people to fake websites or apps relating to coronavirus; these then can install ransomware and lock up the computer. Alternatively, the fraudsters create fake coronavirus emergency assistance websites or apps in order to access personal data such as bank account details and use them for their own fraudulent purposes.
The scattergun approach has had its day
A closer look at the data in our analysis shows that the criminals’ attack methods and tricks have become established. A large proportion of the malware has been in use for several years, but it can still carry out its destructive work because criminals use packers to make it unrecognisable. However, the attackers' targets have shifted - away from private customers to companies. At the same time, they choose their victims carefully in order to maximise their profits.
Companies have therefore become an attractive target for criminals, especially in the current coronavirus pandemic. Since many companies are currently struggling with economic difficulties, the risk of suffering huge financial damage in the event of a ransomware attack rises significantly. After all, it is precisely now that ransom demands have the potential to drive a company to ruin. On top of that, the switch to the home office has increased the complexity of networks in many companies. However, security has not grown to the same extent, especially where the terminal server or sharepoint is freely available on the Internet to ensure business continuity.
