ESET Threat Report H1 2023

Guides|by Leanne Bevan|15 September 2023

Twice a year ESET collates its threat research to bring you an overview of the key trends and findings. Businesses can use this to gain insight into the cyber security landscape, and use it help identify areas that need further protection.

Key findings

In H1 2023, cybercriminals demonstrated adaptability in pursuing various malicious goals.
Attack patterns shifted due to stricter Microsoft security policies, leading attackers to use weaponised OneNote files.
Microsoft adjusted its measures, pushing cybercriminals to explore alternative intrusion methods like brute-force attacks on Microsoft SQL servers.
The Emotet botnet operators struggled to adapt, suggesting a possible change in ownership.
Ransomware actors increasingly reused leaked source code, enabling better detection coverage.
Cryptocurrency threats declined but persisted with cryptomining and cryptostealing in versatile malware.
This pattern resembles past malware evolution, such as keyloggers.
Sextortion scam emails and deceptive Android loan apps targeting vulnerable individuals for financial gain resurfaced.