Threat Report Portugal 2021: Phishing and malware

guest · Jul 24, 2021

Threat Report Portugal: Q2 2021
July 23, 2021
https://securityaffairs.co/wordpress/120455/malware/threat-report-portugal-q2-2021.html

The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática. This feed is based on automatic searches and is also supported by a healthy community of contributors.
0xSI_f33d is part of the official VirusTotal ingestors since July 2021 allowing the community to verify threats worldwide provided by this feed.

The Threat Report Portugal: Q2 2021 compiles data collected on the malicious campaigns that occurred from April to June, Q2, of 2021. The submissions were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d.
Click to expand...

Phishing and Malware Q2 2021
The results depicted in Figure 1 show that phishing campaigns (69,5%) were more prevalent than malware (30,5%) during Q2 2021. It is important to make reference to the values observed in Q1 2021, as phishing and malware increased significantly in this 2nd quarter.
Malware by Numbers
Overall, the Satori/Mirai botnet, QakBot trojan banker, and Office and Macro documents were some of the most prevalent threats affecting Portuguese citizens during Q2 2021. Other trojan bankers’ variants and families affecting users from different banks in Portugal were also observed.

In detail, URSA trojan, Javali, Lampion, and the infamous Grandoreiro; with 16 cybercriminals allegedly operating this threat arrested in Spain, are part of the malware samples submitted and analyzed during Q2 2021 onto 0xSI_f33d.
Click to expand...

Threats by Sector
Regarding the affected sectors, Banking was the most affected with both phishing and malware campaigns hitting Portuguese citizens during Q2 2021. Next, was Retail and Technology, as the most sectors affected in this season.
Click to expand...

guest · Nov 14, 2021

Threat Report Portugal: Q3 2021
November 14, 2021
https://securityaffairs.co/wordpress/124585/cyber-crime/threat-report-portugal-q3-2021.html

The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática. This feed is based on automatic searches and is also supported by a healthy community of contributors. This makes it a reliable and trustworthy and continuously updated source, focused on the threats targeting Portuguese citizens. 0xSI_f33d is part of the official VirusTotal ingestors since July 2021 allowing the community to verify threats worldwide provided by this feed.

The Threat Report Portugal: Q3 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q3, of 2021. The submissions were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d. This report provides intelligence and indicators of compromise (IOCs) that organizations can use to fight current attacks, anticipating emerging threats, and manage security awareness in a better way.
Click to expand...

Phishing and Malware Q3 2021
The results depicted in Figure 1 show that phishing campaigns (79,8%) were more prevalent than malware (20,2%) during Q3 2021. It is important to make reference to the values observed in Q2 2021, as phishing (69,5%) and malware (30,5%) increased significantly in this 3rd quarter.
Malware by Numbers
Overall, Office and Macro documents, QakBot trojan banker, Satori/Mirai botnet, and Maxtrilha trojan were some of the most prevalent threats affecting Portuguese citizens during Q3 2021. Other trojan bankers’ variants and families affecting users from different banks in Portugal were also observed. These kinds of malwares come from Latin American countries in general, and the attacks are disseminated via phishing campaigns. Criminals are also using smishing to enlarge the scope and to impact a large group of victims.
Click to expand...

Threats by Sector
Regarding the affected sectors, Banking was the most affected with both phishing and malware campaigns hitting Portuguese citizens during Q3 2021. Next, was Retail and Technology, as the most sectors affected in this season.
Click to expand...

Log in or Sign up

Threat Report Portugal 2021: Phishing and malware

guest Guest

guest Guest

Log in or Sign up

Threat Report Portugal 2021: Phishing and malware

guest Guest

guest Guest

Useful Searches