Threat Report Portugal 2022: Phishing and malware

guest · Jul 17, 2022

Threat Report Portugal: Q1 2022
April 3, 2022

The results depicted here are based on the submissions from The Portuguese Abuse Open Feed - 0xSI_f33d - during the first quarter, Q1, of 2022 in Portugal. This infographic includes an analysis of the phishing and malware campaigns that targeted Portuguese citizens.

Through the results obtained it is possible to verify a growth in terms of phishing since June 2021 with a significant increase in February 2022. Also, the red line highlighting the malware campaigns maintains the growing trend during Q1 2022.
Click to expand...

In terms of malware, MS Office/macro files, Satori/Mirai botnet, and popular Emotet trojan were the most active during Q1 2022.

Regarding the affected sectors, Retail was the most affected, followed by Banking and lastly by Health.
Click to expand...

Download:
(PDF): https://feed.seguranca-informatica.pt/reports/2022/Threat%20Report%20Portugal%20Q1%202022.pdf
(PNG): https://feed.seguranca-informatica.pt/reports/2022/Threat%20Report%20Portugal%20Q1%202022.png

guest · Jul 17, 2022

Threat Report Portugal: Q2 2022
July 4, 2022

The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática. This feed is based on automatic searches and is supported by a healthy community of contributors. This makes it a reliable, trustworthy, continuously updated source, focused on the threats targeting Portuguese citizens. 0xSI_f33d has been part of the official VirusTotal ingestors since July 2021 allowing the community to verify threats worldwide provided by this feed.

The Threat Report Portugal: Q2 2022 compiles data collected on the malicious campaigns that occurred from March to June, Q2, 2022. The submissions were classified as either phishing or malware. In addition, the report highlights the threats, trends, and key takeaways of threats observed and reported into 0xSI_f33d. This report provides intelligence and indicators of compromise (IOCs) that organizations can use to fight current attacks, anticipate emerging threats, and manage security awareness in a better way.
Click to expand...

Phishing and Malware Q2 2022
The results depicted in Figure 1 show that phishing campaigns (68,9%) were more prevalent than malware (31,1%) during Q2 2022. A growing trend in phishing submissions was observed in Q2 (2630), with malware having 31.1% of the total, in comparison with 6.9% in Q1 2022.
Malware by Numbers
Overall, the Qakbot trojan, the Satori/Mirai botnet, and MS Office documents (macros), were some of the most prevalent threats affecting Portuguese citizens during Q2 2022. Other trojan bankers variants and families affecting users from different banks in Portugal were also observed, including Maxtrilha, Javali, URSA, and Lampion. The Lampion 212 version in particular has used hidden C2 servers for at least two years.
Click to expand...

Threats by Sector
Regarding the affected sectors, Banking was the most affected with both phishing and malware campaigns hitting Portuguese citizens during Q2 2022. Next, Retail and Health, as the most sectors affected in this season.
Click to expand...

Download:
(PDF): https://feed.seguranca-informatica.pt/reports/2022/Threat%20Report%20Portugal%20Q2%202022.pdf
(PNG): https://feed.seguranca-informatica.pt/reports/2022/Threat%20Report%20Portugal%20Q2%202022.png

Log in or Sign up

Threat Report Portugal 2022: Phishing and malware

guest Guest

guest Guest

Log in or Sign up

Threat Report Portugal 2022: Phishing and malware

guest Guest

guest Guest

Useful Searches