BlackBerry’s report reveals surge in malware

BlackBerry has reported a surge in unique malware samples detected and halted by its cyber security solutions. An average of 11,500 new malware samples were identified each day during the second quarter of 2024. This represents a 53% increase from the first quarter and marks one of the highest quarterly increases in the company’s recorded history.

The data is part of BlackBerry’s latest Global Threat Intelligence report. It reveals that underground malware developers are improving the speed and sophistication of their code updates. These developments have made malware more potent, resilient, and difficult to analyze.

Some of the increase is also attributed to tailored attacks targeting multiple employees within the same organization. “As new threat groups emerge and established ones survive takedown attempts, they focus on developing new malware. This signals that these groups are allocating their resources to prioritize the impact of their attacks rather than sheer volume,” said Ismael Valenzuela, vice-president of threat research and intelligence at BlackBerry.

“Minor alterations of malware may seem unsophisticated, but they contribute significantly to the success and severity of attacks.”

In parallel with the rise in unique malware samples, BlackBerry’s report also noted an 18% increase in the number of cyber attacks intercepted daily. This averaged 43,500 attacks, totaling 3.7 million for the quarter.

malware development and cyber threats scrutinized

Critical infrastructure operators were the primary targets, with over 800,000 attacks. Half of these focused on the financial services sector. BlackBerry suggested that the prioritization of critical national infrastructure (CNI) by threat actors could be due to the higher success rate of targeted cyber attacks in this sector.

BlackBerry also observed a 21% increase in attacks on commercial enterprises. This was driven by the growing number of devices in industries such as manufacturing, professional services, and retail. The report highlighted how global crises, from the Covid-19 pandemic to geopolitical conflicts, have provided threat actors with opportunities to launch cyber attacks.

The concept of the “weaponization of chaos” refers to how any disruption to daily life can be exploited by cyber criminals. They are becoming increasingly adept at incorporating these elements into phishing campaigns, misleading social media posts, and malicious software. BlackBerry’s research team predicts that threat actors will continue to refine their tactics, targeting victims with increasingly sophisticated methodologies.

The rise in new infostealers and other types of malware suggests that the theft of private data will remain a highly sought-after objective. As the landscape of cyber threats evolves, the data from BlackBerry’s latest report underscores the need for improved defenses and heightened awareness among organizations. With threat actors continuously adapting their techniques, cyber security measures must also advance to protect critical infrastructure and commercial enterprises from the growing wave of cyber attacks.