ESET Threat Report: Infostealers using AI; banking malware creating deepfake videos to steal money
Cyber threats are rapidly evolving, but with ESET's latest Threat Report H1 2024 and the power of ESET XDR, organizations can maintain a proactive defense. This report provides an in-depth analysis of the latest trends, such as infostealers using generative AI decoys and banking malware that manipulates facial recognition data through deepfake videos. The report highlights the rise of GoldPickaxe, targeting victims across Southeast Asia and beyond, and the significant increases in RedLine Stealer detections. It also covers the exploitation of WordPress plugin vulnerabilities by Balada Injector, compromising thousands of websites. Readers will gain insights into threat landscapes to better understand and mitigate risks. Multi-Vendor's ESET XDR plays a crucial role in this scenario, offering enhanced detection and responsiveness capabilities. By reading the ESET Threat Report H1 2024, available at WeLiveSecurity.com, you'll learn how to reshape your security strategy and how we, as your trusted reseller, can guide and equip you with the necessary tools for an invigorated defense posture.
What are the latest trends in infostealer malware?
The ESET Threat Report indicates that infostealers are increasingly impersonating generative AI tools like Midjourney, Sora, and Gemini to lure victims. Additionally, the RedLine Stealer has seen significant detection spikes, particularly in Spain, Japan, and Germany, with a notable increase of over 30% in detections in the first half of 2024 compared to the previous half.
What is GoldPickaxe and how does it operate?
GoldPickaxe is a new mobile malware that targets both Android and iOS devices, capable of stealing facial recognition data to create deepfake videos. This malware has been particularly active in Southeast Asia, using localized malicious apps to deceive users. Its predecessor, GoldDiggerPlus, has also been reported in regions like Latin America and South Africa.
How has the ransomware landscape changed recently?
The ransomware landscape has seen significant changes, particularly with the rise of Operation Chronos, which disrupted the previously dominant LockBit group in February 2024. While LockBit still conducted two notable campaigns in the first half of 2024, these were attributed to non-LockBit gangs utilizing leaked LockBit tools, indicating a shift in the operational dynamics of ransomware threats.
Sign in with LinkedIn