DarkOwl Forecasts Ransomware, Credential Theft and Other Threats to Persist in 2024
Summary
DarkOwl analysts review 2023 cyber threats and forecast continued ransomware, credential theft, dark web activity, messaging-app use and malicious adoption of AI in 2024.
Key points
- DarkOwl says dark web markets and actors re-emerged after law-enforcement actions, while forums increased access restrictions and anti-scraping measures.
- The analysts expect threat actors and hacktivists to continue using Telegram and Discord for communication, publicity and sharing information.
- The article reports 4,671 ransomware attacks in 2023 and highlights CL0P’s use of a zero-day and LockBit’s reported 1,041 victims.
- DarkOwl expects extortion without encryption to grow, alongside ransomware groups’ continued use of data-leak threats.
- The article warns that stolen credentials and stealer logs remain valuable because credentials, cookies and user agents can enable account or network access.
- DarkOwl expects malicious uses of AI, including phishing and generating images for fake IDs, to expand.
- The analysts anticipate continued cyber activity tied to geopolitical conflicts, elections and state-backed groups, particularly China.
Article Details
- Topic
- Expected cybersecurity threat trends for 2024, including ransomware, credential theft, dark web activity, messaging apps, Islamic extremism, AI-enabled attacks, and APT activity.
Threat Actors
AQAPGroup reported to have revived the English-language Inspire magazine in video format and used online material to incite violence.BlackCat/ALPHVRansomware group reported to have resumed operations with a new leak site and victims after a law-enforcement disruption.Cl0pRansomware group reported to have used a zero-day vulnerability to target victims and publish their data.ISISGroup described as having used online methods to incite violence and attract and radicalize followers.LockBitRansomware group described as the most active in 2023, with victims posted on its leak site.
Malware
Products
BardAnother theme of 2023 was the rise of AI with Chat GPT and Bard, among others, being released and adopted by many.ChatGPTFigure 9 – Breach Forums users discuss jailbreaking ChatGPTDiscordOver the last year, threat actors increased and affirmed their use of other means of communication such as Telegram and Discord.TelegramWhen BreachForum was seized, and its administrator arrested, a Telegram channel and shortly after, a new site quickly took its place.
Countries
ChinaHowever, the country likely to pose the largest and most persistent threat is China.IranAs geo-political tensions continue, with wars in the Middle East and in Ukraine, Iran and Russia are likely to be very active in 2024.IsraelWhile the use of Telegram was promoted by the Russia/Ukraine war, events such as the Hamas/Israel conflict in 2023 cemented their use, not only as a means of communication but also as a way of delivering news, bothRussiaWhile the use of Telegram was promoted by the Russia/Ukraine war, events such as the Hamas/Israel conflict in 2023 cemented their use, not only as a means of communication but also as a way of delivering news, bothUkraineWhile the use of Telegram was promoted by the Russia/Ukraine war, events such as the Hamas/Israel conflict in 2023 cemented their use, not only as a means of communication but also as a way of delivering news, both