Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1023099" data-attributes="member: 32260">SonicWall mid-year 2022 cyber threat report.[ATTACH=full]272646[/ATTACH][ATTACH=full]272643[/ATTACH][ATTACH=full]272645[/ATTACH]Never-before-seen malware is about 0,01% of global malware. This follows from the fact that most malware samples are morphed into many variants (polymorphic, oligomorphic, metamorphic).Ransomware is about 10% of global malware.Another report shows that about 90% of ransomware is delivered via weaponized documents.[URL unfurl=&quot;true&quot;]https://www.infosecurity-magazine.com/news/87-ransomware-brands-exploit-macros/[/URL]The attack vector via office macros is going to be less popular due to macro mitigations introduced by Microsoft last year. But, this will be probably replaced by other vectors related to MS Office (Excel add-ins, remote template injection, One Note attachments, etc.).[ATTACH=full]272647[/ATTACH]This chart shows, that only about 1/3 of new malicious files are Executables. Close to 1/3 are weaponized documents, and most of the rest malware are scripts and archives. Many YouTube tests on the AV protection still uses only EXE files, which can highly distort the real protection of tested AVs.[ATTACH=full]272648[/ATTACH][ATTACH=full]272650[/ATTACH]The full report is available here:[URL unfurl=&quot;false&quot;]https://www.infopoint-security.de/media/sonicwall-mid-year-2022-cyber-threat-report.pdf[/URL]</blockquote>

[QUOTE="Andy Ful, post: 1023099, member: 32260"] [B][SIZE=5]SonicWall mid-year 2022 cyber threat report.[/SIZE][/B] [ATTACH type="full" width="811px" alt="1675527938501.png"]272646[/ATTACH] [ATTACH type="full" width="809px" alt="1675527493158.png"]272643[/ATTACH] [B][SIZE=4][ATTACH type="full" width="810px" alt="1675527718342.png"]272645[/ATTACH][/SIZE][/B] Never-before-seen malware is about 0,01% of global malware. This follows from the fact that most malware samples are morphed into many variants (polymorphic, oligomorphic, metamorphic). Ransomware is about 10% of global malware. Another report shows that about 90% of ransomware is delivered via weaponized documents. [URL unfurl="true"]https://www.infosecurity-magazine.com/news/87-ransomware-brands-exploit-macros/[/URL] The attack vector via office macros is going to be less popular due to macro mitigations introduced by Microsoft last year. But, this will be probably replaced by other vectors related to MS Office (Excel add-ins, remote template injection, One Note attachments, etc.). [ATTACH type="full" alt="1675528286943.png"]272647[/ATTACH] This chart shows, that only about 1/3 of new malicious files are Executables. Close to 1/3 are weaponized documents, and most of the rest malware are scripts and archives. Many YouTube tests on the AV protection still uses only EXE files, which can highly distort the real protection of tested AVs. [ATTACH type="full" width="816px" alt="1675528393304.png"]272648[/ATTACH] [ATTACH type="full" width="816px" alt="1675528645922.png"]272650[/ATTACH] The full report is available here: [URL unfurl="false"]https://www.infopoint-security.de/media/sonicwall-mid-year-2022-cyber-threat-report.pdf[/URL] [/QUOTE]

Verification