Threat Report Portugal 2020: Phishing and malware

guest · Apr 21, 2020

Threat Report Portugal Q1 2020: Phishing and malware by numbers
April 20, 2020
https://securityaffairs.co/wordpres...g-malware-threat-report-portugal-q1-2020.html

The Portuguese Abuse Open Feed 0xSI_f33d is a novel open sharing database with the ability to collect indicators from multiple sources, developed by Segurança-Informática. This feed is based on automatic searches and also has a strong contribution from the community. This makes it a reliable and trustworthy and continuously updated source, focused on the threats targeting Portuguese citizens.

The Threat Report Portugal: Q1 2020 compiles data collected on the malicious campaigns that occurred from January to March, Q1, of 2020. The campaigns were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d.
Click to expand...

Phishing and Malware Q1 2020
The results depicted in Figure 1 show that phishing campaigns (57,7%) were more prevalent than malware (42,3%) during Q1 2020.
Malware by Numbers
Overall, the Lampion Trojan malware was the most prevalent malware targeting Portuguese citizens during Q1 2020. Trojan bankers affecting users from different banks in Portugal were also observed.

In third place, is the infamous Emotet malware. Emotet has been reported in domains under Portuguese TLD (.pt). For more details about this threat, please access the Threat Report: Emotet Triple Chain Analysis 2019 – Portugal.
Click to expand...

Threats by Sector
Regarding the affected sectors (Figure 5), Banking was the most affected with both phishing and malware campaigns hitting Portuguese citizens during Q1 2020. Next, was Financing due to the Lampion Trojan and Retail, as the most sectors affected in this season.
Click to expand...

guest · Aug 16, 2020

Threat Report Portugal: Q2 2020
August 14, 2020
https://securityaffairs.co/wordpress/107149/cyber-crime/threat-report-portugal-q2-2020.html

The Threat Report Portugal: Q2 2020 compiles data collected on the malicious campaigns that occurred from April to Jun, Q2, of 2020. The campaigns were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d
Click to expand...

Phishing and Malware Q2 2020
The results depicted in Figure 1 show that phishing campaigns (84,5%) were more prevalent than malware (15,5%) during Q2 2020.
Malware by Numbers
Overall, the Lampion Trojan malware was one of the prevalent threats affecting Portuguese citizens during Q2 2020. Other trojan bankers variants and families affecting users from different banks in Portugal were also observed. These kinds of malwares come from Brazil and the attacks are disseminated via phishing campaigns.

In a research conducted by Segurança-Informática, where the whole phishing chain was described, it is possible to validate that the Android trojan bankers used Android webviews to remotely load the phishing-landing page.
Click to expand...

guest · Nov 6, 2020

Threat Report Portugal: Q3 2020
November 6, 2020
https://securityaffairs.co/wordpress/110492/cyber-crime/threat-report-portugal-q3-2020.html

The Threat Report Portugal: Q3 2020 compiles data collected on the malicious campaigns that occurred from July to August, Q3, of 2020. The campaigns were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d.
Click to expand...

Phishing and Malware Q3 2020
The results depicted in Figure 1 show that phishing campaigns (72,8%) were more prevalent than malware (27,2%) during Q3 2020. It is important to make a reference to the values of Q2, malware maintains the growth trend, with an increase of ~10% in this trimester.
Malware by Numbers
Overall, the URSA trojan malware was one of the prevalent threats affecting Portuguese citizens during Q3 2020. Other trojan bankers variants and families affecting users from different banks in Portugal were also observed. These kinds of malwares come from Brazil and the attacks are disseminated via phishing campaigns. Criminals are also using smishing to enlarge the scope and to impact a large group of victims.
Click to expand...

Download: [PDF] or [PNG]
Click to expand...

guest · Jan 30, 2021

Threat Report Portugal: Q4 2020
January 28, 2021
https://securityaffairs.co/wordpress/113882/cyber-crime/threat-report-portugal-q4.html

Threat Report Portugal Q4 2020: Data related to Phishing and malware attacks based on the Portuguese Abuse Open Feed 0xSI_f33d.
Click to expand...

Phishing and Malware Q4 2020
The results depicted in Figure 1 show that phishing campaigns (76,1%) were more prevalent than malware (23,9%) during Q4 2020. It is important to make a reference to the values of Q3 as phishing and malware maintain a growing trend.
Malware by Numbers
Overall, the Emotet and Satori/Mirai botnet were some of the most prevalent threats affecting Portuguese citizens during Q4 2020 along with the mediatic URSA trojan (Figure 3). Other trojan bankers variants and families affecting users from different banks in Portugal were also observed.
These kinds of malware come from Brazil and the attacks are disseminated via phishing campaigns. Criminals are also using smishing to enlarge the scope and to impact a large group of victims.
Click to expand...

You can download the report from the original post:
https://seguranca-informatica.pt/threat-report-portugal-q4-2020/#.YBBX3-hKg2x
Click to expand...

Log in or Sign up

Threat Report Portugal 2020: Phishing and malware

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Threat Report Portugal 2020: Phishing and malware

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches