Darktrace Reports MaaS, Ransomware and Phishing Trends in H1 2024
Summary
Darktrace’s first-half 2024 findings highlight persistent MaaS malware, double extortion by ransomware groups, and widespread phishing, including QR-code attacks.
Key points
- Darktrace observed recurring malware including Mirai, AsyncRAT, Emotet and NjRAT, noting that familiar strains remain active.
- Akira, LockBit and Black Basta were among the ransomware strains affecting Darktrace customers; the report says double extortion is prevalent.
- In Akira incidents, attackers attempted data exfiltration within 12 hours of encrypting files.
- From December 21, 2023, to July 5, 2024, Darktrace / EMAIL detected 17.8 million phishing emails; 62% bypassed DMARC checks.
- Darktrace detected 550,000 malicious QR codes that could direct recipients to malware or credential theft.
Article Details
- Publisher
- Darktrace
- Report Period
- First half of 2024; email statistics cover December 21, 2023–July 5, 2024
- Scope
- Threats observed across Darktrace’s fleet, including malware, ransomware, and email attacks.
- Key Statistics
- Darktrace / EMAIL detected 17.8 million phishing emails across its fleet between December 21, 2023, and July 5, 2024.
- 62% of those phishing emails bypassed DMARC verification checks.
- Darktrace detected 550,000 malicious QR codes.
- Recommendations
- Secure the inbox and extend email security beyond it.
- Maintain timely threat detection and containment capabilities.
Malware
AkiraAs ransomware continues to be a top security concern for organizations, Darktrace’s Threat Research team has identified three predominant ransomware strains impacting customers: Akira, Lockbit, and Black Basta. AsyncRATWhen comparing the latest observed threats with the previous half year’s data, there are several returning threats, notably Mirai, AsyncRAT, Emotet, and NjRAT. Black BastaAs ransomware continues to be a top security concern for organizations, Darktrace’s Threat Research team has identified three predominant ransomware strains impacting customers: Akira, Lockbit, and Black Basta. EmotetWhen comparing the latest observed threats with the previous half year’s data, there are several returning threats, notably Mirai, AsyncRAT, Emotet, and NjRAT. LockBitAs ransomware continues to be a top security concern for organizations, Darktrace’s Threat Research team has identified three predominant ransomware strains impacting customers: Akira, Lockbit, and Black Basta. MiraiWhen comparing the latest observed threats with the previous half year’s data, there are several returning threats, notably Mirai, AsyncRAT, Emotet, and NjRAT. njRATWhen comparing the latest observed threats with the previous half year’s data, there are several returning threats, notably Mirai, AsyncRAT, Emotet, and NjRAT.