ThreatDown ：2024 年恶意软件状况报告：从恶意软件到威胁：全面防御指南（英文版）（31页）.pdf

1、From malware to threats,a comprehensive defense guide2024State of MalwarePartner2024 State of Malware2Contents1.Why organizations need a guide .32.Lessons learned from 2023 .43.Big game ransomware .64.Malvertising .105.Zero-day ransomware .146.Living Off The Land .187.Android banking trojans .218.Ne

2、w Mac malware tactics .259.How organizations can prepare .2810.Introducing ThreatDown Bundles .292024 State of Malware3ContentsFrom malware to threatsCybercrime is a thriving and highly organized businessa multi-billion-dollar mirror to the legitimate economy it feeds off.Its ecosystem supports enti

3、re supply chains which are dotted about with specialized organizations like access brokers and malicious software vendors.It has brand names,PR stunts,HR departments,incentive schemes,and“employees of the month.”And like broader,law-abiding“Business”at large,cybercrime has settled on a collection of

4、 tools that work.Sit at a regular desktop computer in the US or Europe and youll see software that would have been familiar 15 years ago such as Microsoft Windows,Office,and a web browser.Cybercrime has info stealers,phishing,and ransomware.Like Windows and Office,they are mature and effective,and f

5、or years the latest iterations have only offered marginal improvements on their predecessors.As a result,innovation in cybercrime has increasingly shifted towards tacticsadvancements that focus more on how attacks can succeed and less on what malware can do.Malware is as dangerous as ever,but when i

6、t is used,it is just one link in an attack chain of multiple different threats.IT and security teams now face“Living Off The Land”(LOTL)attacks,active adversaries,zero-day exploits,compromised accounts,social engineering,and a range of other threats that dont meet the traditional definition of malwa