Check Point Greece September 2019 top malware

Check Point Research, the research division of Check Point Software Technologies Ltd., has published the latest Global Threat Inventory in Greece for September 2019.

The full list of the 10 most prevalent malware threats in Greece for September is:

AgentTesla – AgentTesla is a sophisticated RAT that acts as a keylogger and password stealer, infecting computers since 2014. AgentTesla has the ability to monitor and collect the victim’s keyboard and system clipboard entries , take screenshots, and extract credentials from software installed on the victim’s machine (including Google Chrome , Mozilla Firefox , and the Microsoft Outlook email client ). AgentTesla is sold as a legitimate RAT with interested parties paying $15 – $69 for a user license.

Lokibot – Lokibot is information - sniffing software that is primarily spread through phishing emails and is used to steal data such as email credentials, as well as passwords to cryptocurrency wallets and FTP servers .

Trickbot – Trickbot is a variant of Dyre that appeared in October 2016. Since then, it has mainly targeted banking users in Australia and the United Kingdom , and has recently started appearing in India, Singapore, and Malaysia.

Emotet – A sophisticated, self-replicating modular trojan . Emotet was once a banking account stealing Trojan and has recently been used to distribute other malware or in malware distribution campaigns . It uses multiple evasion methods and techniques to persist in the system and evade detection. It can also be spread through unsolicited phishing emails that contain attachments or links with malicious content.

Hawkeye – Hawkeye is a malicious Info Stealer , which was primarily designed to extract user credentials from infected Windows platforms . In recent months, Hawkeye has been enhanced to include keylogging capabilities in addition to stealing email and web browser passwords . It is often marketed as MaaS ( Malware as a Service ) through various infection chain techniques.

Pony – Pony is a malicious Info Stealer , primarily designed to extract user credentials from infected Windows platforms , and is also known as Pony Stealer , Pony Loader , FareIT , and many others. Pony was created in 2011, and by 2013 its source code was publicly released, allowing the development of decentralized versions. In addition to its Stealer function, Pony ’s functions allow attackers to monitor the user’s system and network activities, download and install additional malware, and even infect additional computers by creating a botnet . Due to its nature, Pony has been exploited by many attack actors.

Jsecoin – JavaScript mining software that can be embedded into websites. With JSEcoin , you can run mining software directly in your browser in exchange for an ad-free browsing experience, in-game coins, and other incentives.

Phoenix

Cryptoloot – Cryptocurrency mining software that uses the victim's CPU or GPU power and existing resources to mine cryptocurrency – adding transactions to the blockchain and generating new coins. Competes with Coinhive .

XMRig – XMRig is an open source CPU mining software used for the Monero cryptocurrency mining process and was first seen in circulation in May 2017 .

The Check Point Global Threat Impact Index and ThreatCloud Map are powered by Check Point ’s ThreatCloud intelligence , the largest collaborative network for combating cybercrime, which provides threat and attack trend data, leveraging a global network of threat detectors. The ThreatCloud database includes more than 250 million botnet addresses , more than 11 million malware signatures, and more than 5.5 million infected websites, and identifies millions of types of malware every day.

The full list of the 10 most prevalent malware threats worldwide for September can be found here.

Check Point Threat Prevention Resources are available on the website:

http://www.checkpoint.com/threat-prevention-resources/index.html