OpenText announces list of worst malware of 2024… 1st place is ‘Rockbit’

OpenText has released its ‘Worst Malware of 2024’ list, highlighting the most notorious cyber threats of the year. Now in its seventh year, this list highlights the most serious and adaptive malware affecting major industries around the world. In particular, ransomware attacks targeting major infrastructure took center stage this year, indicating an urgent need to strengthen security to protect core services. Accordingly, the company predicted that cybersecurity investment will increase by 14.3% in 2024, reaching a total of $215 billion.

LockBit ranked first as the worst malware this year. Notorious for its resilience and targeted attacks, Lockbit continues to pose a threat while avoiding crackdowns by various law enforcement agencies. According to the FBI’s 2023 Internet Crime Report, Lockbit was mentioned in 175 attacks against critical infrastructure. This is a result that highlights the extensive scale of damage and adaptability of Rockbit, the company said. The confrontation between the FBI and Rockbit over the past few months is a clear example of the sophistication of the ransomware market and its risks.

“Ransomware attacks targeting critical infrastructure are on the rise, and cybercriminals are leveraging AI to create highly personalized threats,” said Muhi Mazov, Vice President and Chief Product Officer at OpenText. “This poses a major threat to national security and public safety, but fortunately, more companies are prioritizing cybersecurity, and interest in ransomware defense is increasing.”

OpenText’s list of the worst malware of 2024 is as follows:

• Rockbit : It is again leading the way in the FBI’s attempts to crack down on ransomware. Rockbit has established itself as the top ransomware threat in 2024 by targeting 1 million business attack points.
• Akira : It incorporated 1980s aesthetics into the dark web and quickly entered the rankings with ruthless encryption tactics and rapid distribution. It is a service-type ransomware that is particularly active in the medical, manufacturing, and financial fields.
• RansomHub : Ransom Hub, known as the successor to the Black Cat (ALFV) group, targets famous organizations and carries out top-down attacks to steal sensitive data and threaten them.
• Dark Angels : Dark Angels, known for high-impact attacks on top targets, secured a ransom worth $75 million through advanced infiltration methods. It is known that it also caused damage to one of the Fortune 50 companies.
• RedLine : Although not ransomware, it is still powerful. Redline Stealer specializes in stealing credentials and sensitive information using skillful evasive tactics. It remains a major headache in various industries.
• Play : Notorious for its relentless attacks. From targeting the public and private sectors to exploiting FortiOS vulnerabilities and RDP servers, ransomware poses a threat with constantly evolving technology.

editor@itworld.co.kr