Mobile banking malware increased 3.6 times

Cybercriminals continue to lure users to fake websites...

In addition, malware targeting personal computers (PCs) has also shown a clear change in its targets. Attacks on traditional banks are decreasing, giving way to an explosion of attacks aimed at stealing cryptocurrency assets. This data is published in Kaspersky's new Financial Cyber ​​Threats Report for 2024.

In 2024, cybercriminals continued to lure users to fake websites that mimicked the look and feel of well-known brands and financial institutions. The banking sector became the most targeted sector for financial fraud, accounting for 42.6% of all cases, up from 38.5% in 2023.

Amazon Online Shopping was the most counterfeited brand in phishing campaigns targeting online shoppers, accounting for 33.2%. Apple’s attack rate decreased by nearly 3 percentage points to 15.7% compared to last year. Notably, Alibaba has become an attractive target for cybercriminals seeking financial gain, with fraud increasing from 3.2% (2023) to 8% (2024) on the platform.

In addition, fraud impersonating payment systems is also a hot front. In 2024, Kaspersky detected and blocked such incidents, accounting for 19.3% of all financial fraud (down slightly from 19.9% ​​in 2023). Among payment systems impersonated, PayPal remained at the top of the list, although the proportion of attacks targeting this brand decreased significantly, from 54.7% (2023) to 37.5% (2024).

The most common banking Trojans in 2024 included: ClipBanker (62.9%), Grandoreiro (17.1%), CliptoShuffler (9.5%), and BitStealer (1.3%). Grandoreiro is a sophisticated banking Trojan that attacked 1,700 banks and 276 cryptocurrency wallets in 45 countries and territories in 2024.

In 2024, the number of users exposed to mobile banking Trojans increased 3.6 times compared to 2023, from 69,200 to 247,949. Notably, their activity increased particularly strongly in the second half of the year.

Mamont was the most common banking Trojan family in 2024, accounting for 36.7% of all detections. Its delivery methods range from simple phishing scams to sophisticated social engineering campaigns, such as fake shopping apps and order tracking apps.

“Fraudsters are becoming increasingly skilled at impersonating brands and services to steal personal data, and the growing use of smartphones for financial transactions makes users more vulnerable to cybercriminals. As a result, we expect financial fraud to become increasingly personalized and targeted, focusing on exploiting vulnerabilities in everyday technology usage,” said Olga Svistunova, Senior Web Content Analyst at Kaspersky.

BINH LAM

Source: https://www.sggp.org.vn/ma-doc-ngan-hang-di-dong-tang-36-lan-post790171.html