Heimdal™ Security Threat-Hunting Journal: End of the Year Wrap-up in Malware

Marking the end of 2021, Heimdal™ has enacted the very first entry of the Threat-Hunting journal, a blog section dedicated to the latest cybersecurity threats. The article and its findings reflect the shifts in cybercriminal approaches, techniques, ‘repackaging’, and malware. Below, you will find a summary of the data gathered between the 1st of November and the 1st of January by our probes.

Top 20 Malware(s) Detection: November 1st – January 1st, 2022 Malware designation Number of hits (detections) JS/Redir.G13 257465 ACAD/Bursted.AN 23412 TR/Patched.Ren.Gen4 19181 W32/Chir.B 8563 TR/Dropper.Gen 6171 HTML/Infected.WebPage.Gen2 5170 SPR/ANDR.WAMod.IBCY.Gen 3603 HEUR/APC 1824 ADWARE/Adware.Gen7 1669 HTML/ExpKit.Gen2 1366 W32/Floxif.hdc 1330 TR/Blackhole.C 1105 EXP/CVE-2010-2568.A 956 TR/AD.Macoute.edpwe 895 W32/Run.Ramnit.C 812 TR/Crypt.XPACK.Gen 755 ADWARE/Adware.Gen2 587 VBS/Ramnit.abcd 556 TR/Patched.Ren.Gen 555 JS/Dropper.G4 545

During the above-mentioned interval, Heimdal™ has detected various types of malware (from JavaScript exploits to generic/heuristic APCs), but predominantly trojan activity. Six trojan strains have been identified, totaling 28,662 hits (i.e., positive detections). Broken down

Read More: https://heimdalsecurity.com/blog/heimdal-threat-hunting-journal/