October 2022's Most Wanted Malware: AgentTesla Knocks Formbook off Top Spot

guest · Nov 8, 2022

November 8, 2022

Check Point Research reports a significant increase in Lokibot attacks in October, taking it to third place for the first time in five months. New vulnerability, Text4Shell, was disclosed for the first time, and AgentTesla took the top spot as the most prevalent malware
Click to expand...

Our latest Global Threat Index for October 2022 reports that keylogger AgentTesla has taken first place as the most widespread malware, impacting 7% of organizations worldwide. There was a significant increase in the number of attacks from the infostealer Lokibot, which reached the third spot for the first time in five months. Also, a new vulnerability, Text4Shell, affecting the Apache Commons Text library, was disclosed.

Lokibot is a commodity infostealer that is designed to harvest credentials from a variety of applications including: web browsers, email clients and IT administration tools. As a trojan, its goal is to sneak, undetected onto a system by masquerading as a legitimate program. It can be distributed through phishing emails, malicious websites, SMS, and other messaging platforms. This rise in popularity can be explained by the increase in spam campaigns themed around online inquiries, orders and payment confirmation messages.
Click to expand...

October also saw disclosure of a new critical vulnerability, Text4Shell, (CVE-2022-42889). Based on the Apache Commons Text’s functionality, this allows attacks over a network, without the need for any specific privileges or user interaction. Text4shell is reminiscent of the Log4Shell vulnerability, which is still one year on, one of the major threats, ranking at number two in the October list.
Click to expand...

Top Malware Families
AgentTesla was the most widespread malware this month impacting 7% of organizations worldwide, followed by SnakeKeylogger affecting 5% and Lokibot with an impact of 4%.
Top Attacked Industries Globally
This month the Education/Research sector remains in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
Click to expand...

Top exploited vulnerabilities
“Web Server Exposed Git Repository Information Disclosure” remained the most commonly exploited vulnerability in October, impacting 43% of organizations globally. This is followed by “Apache Log4j Remote Code Execution” in second place with an impact of 41% and “HTTP Headers Remote Code Execution” taking the third spot with a global impact of 39%.
Top Mobile Malwares
This month, Anubis held onto first place as the most prevalent mobile malware, followed by Hydra and Joker.
Click to expand...

Log in or Sign up

October 2022's Most Wanted Malware: AgentTesla Knocks Formbook off Top Spot

guest Guest

Log in or Sign up

October 2022's Most Wanted Malware: AgentTesla Knocks Formbook off Top Spot

guest Guest

Useful Searches