{"id":352729,"date":"2025-03-29T07:15:05","date_gmt":"2025-03-29T01:45:05","guid":{"rendered":"https:\/\/www.technologyforyou.org\/?p=352729"},"modified":"2025-03-29T07:15:05","modified_gmt":"2025-03-29T01:45:05","slug":"3-6-times-surge-in-mobile-banking-malware-and-83-crypto-phishing-spike-new-financial-cyberthreats-report-by-kaspersky","status":"publish","type":"post","link":"https:\/\/www.technologyforyou.org\/3-6-times-surge-in-mobile-banking-malware-and-83-crypto-phishing-spike-new-financial-cyberthreats-report-by-kaspersky\/","title":{"rendered":"3.6 times surge in mobile banking malware and 83% crypto phishing spike: New financial cyberthreats report by Kaspersky"},"content":{"rendered":"
\n

In 2024, as digital financial transactions continued to expand worldwide, cybercriminals shifted their focus toward mobile devices and crypto assets. According to Kaspersky\u2019s new Financial Cyberthreats report, the number of users encountering mobile banking Trojans rose by 3.6 times compared to 2023, while crypto\u2011related phishing detections climbed by 83.4%. Meanwhile, PC\u2011focused malware saw a decline in traditional banking attacks but a surge in crypto\u2011asset theft. This data comes from Kaspersky\u2019s new Financial Cyberthreats report for 2024.<\/span><\/p>\n<\/div>\n

\n

Financial phishing<\/strong><\/p>\n

In 2024, online fraudsters continued to lure users to phishing and scam pages that mimicked the websites of popular brands and financial organizations.<\/p>\n

Banks were the most popular lure in 2024, accounting for 42.6% of financial phishing attempts (compared to 38.5% in 2023).<\/p>\n

Amazon Online Shopping was mimicked by 33.2% of all phishing and scam pages targeting online store users in 2024, making it the most popular online brand target for fraudsters. Apple\u2019s share of attacks dropped nearly 3 p.p. on last year\u2019s figure to 15.7%, while Netflix scams grew slightly to 16%. Meanwhile, fraudsters’ interest in the Alibaba marketplace increased, its share going up from 3.2% in 2023 to 8% in 2024.<\/p>\n

Payment systems were mimicked in 19.3% of financial phishing attacks detected and blocked by Kaspersky products in 2024 (19.9% in 2023). Once again PayPal was the most targeted brand, however, the ratio of attacks related to it fell from 54.7% to 37.5%. Attacks targeting Mastercard, on the contrary, nearly doubled from 16.6% in 2023 to 30.5% in 2024. American Express and Cielo are the new entrants into the top five replacing Visa, Interac and PayPay.<\/p>\n

In 2024, the number of phishing and scam attacks related to cryptocurrencies saw a whopping increase. Kaspersky antiphishing technologies prevented 10,706,340 attempts to follow a cryptocurrency-themed phishing link, an 83.4% increase over the 2023 figure of 5,838,499. As cryptocurrency popularity continues to grow, the number of attacks is only ever going to get larger.<\/p>\n

Financial malware for PCs<\/strong><\/p>\n

While the number of users who encountered mobile banking malware increased, the share of those who were affected by financial PC malware decreased from 312,453 in 2023 to 199,204 in 2024. Currently most financial PC malware that Kaspersky detects is targeting not online banking, but crypto assets. The banking Trojans that were most often detected in 2024 included ClipBanker (62.9%), Grandoreiro (17.1%), CliptoShuffler (9.5%) and BitStealer (1.3%). Grandoreiro is a full-fledged banking Trojan that\u00a0targeted<\/a>\u00a01,700 banks and 276 crypto wallets in 45 countries and territories around the globe in 2024.<\/p>\n

Among the top 20 countries by the share of users affected by financial malware for PCs were Turkmenistan (8.8%), Tajikistan (6.2%), Kazakhstan (2.5%), Switzerland (2.3%), Kyrgyzstan (2.2%), Mexico (1.6%), Argentina (1.1%), Paraguay (1.1%) and Uruguay (1%).<\/p>\n

Mobile financial threats<\/strong><\/p>\n

In 2024, the number of users who encountered mobile banking Trojans grew 3.6 times compared to 2023: from 69,200 to 247,949, with malicious activity significantly increasing in the second half of 2024.\u00a0The most active Trojan-Banker family in 2024 was\u00a0Mamont\u00a0(36.7%). Its distribution schemes ranged from simple scams to complex social engineering plots with fake stores and delivery tracking apps.<\/p>\n

T\u00fcrkiye remained the country most targeted by mobile banking malware. The share of users encountering financial threats there grew by almost 3 p.p. and reached 5.7%. Malicious activity also increased in Indonesia (2.7% of all users per country affected), India (2.4%), Azerbaijan (0.9%), Uzbekistan (0.6%) and Malaysia (0.3%).<\/p>\n

\u201cIn 2024, financial phishing and scams increased in numbers and reached a new level of sophistication, unleashing waves of attacks on users. Fraudsters are increasingly leveraging fake brands and services to get user data, and the popularity of smartphones for financial transactions only fuels their appetite. Looking ahead, we expect financial phishing to become even more personalized and targeted, focusing on exploiting vulnerabilities in everyday digital habits, which will demand increased vigilance and thorough approaches to protection,\u201d comments Olga Svistunova, senior web content analyst at Kaspersky.<\/strong><\/p>\n

Read more in the\u00a0post\u00a0<\/a>on Securelist.com.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

In 2024, as digital financial transactions continued to expand worldwide, cybercriminals shifted their focus toward mobile devices and crypto assets. According to Kaspersky\u2019s new Financial Cyberthreats report, the number of users encountering mobile banking Trojans rose by 3.6 times compared to 2023, while crypto\u2011related phishing detections climbed by 83.4%. Meanwhile, PC\u2011focused malware saw a decline […]<\/p>\n","protected":false},"author":1,"featured_media":24710,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":{"0":"post-352729","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security"},"_links":{"self":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts\/352729","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/comments?post=352729"}],"version-history":[{"count":0,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/posts\/352729\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/media\/24710"}],"wp:attachment":[{"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/media?parent=352729"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/categories?post=352729"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.technologyforyou.org\/wp-json\/wp\/v2\/tags?post=352729"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}