G DATA threat report: cyber attacks increase by 25 percent

The number of averted cyber attacks rose sharply again towards the end of 2021. Cyber defence experts at G DATA recorded an increase of more than 25 percent for the fourth quarter of 2021 compared to the third quarter. Private users were increasingly the focus of cyber criminals here. The number of averted attacks rose by 29 percent, while the increase for business customers was only 15 percent. One explanation for this is that attackers traditionally use promotional days, such as Black Friday and the pre-Christmas period, specifically to invite consumers to visit websites using fake offers.

After a coordinated takedown in January 2021, Emotet was back again in November 2021. An analysis by G DATA identified more new variants of the malware for the first time. In recent years, Emotet had earned a reputation as one of the most dangerous malwares in existence because it is specifically used as a bridgehead for cyber attacks on companies of all sizes. In the past, an initial infection with the malware was often followed by an attempt to extort money from previously compromised companies through the use of an encryption Trojan. A look at the Malware Top 10 shows how great the danger is. Although Emotet was in fact only active for three months of the year (January, November and December), the malware already holds a top position in the ranking.

However, the following figure shows how great the danger of cyber attacks still is: security experts identified more than 23.7 million different malware samples in 2021. Compared to 2020, this is an increase of over 47 percent, which shows that cyber criminals are continuing to keep up the pace. They have been publishing almost 65,000 new variants of their malware every day - that's 45 new attack vectors per minute - in the hope that antivirus solutions will not detect the “disguised” attackers and will allow them to infiltrate the PC or laptop.

Following massive growth rates during the first year of coronavirus, the number of averted attack attempts declined significantly year-on-year. Overall, the cyber defence experts at G DATA recorded 65.3 percent fewer averted cyber attacks in 2021 than in 2020. In the case of private users, attack attempts were reduced by 69 percent, and by 39.1 percent in the case of corporate customers. The reasons for this significant decline are complex. On the one hand, attackers have refined their methods and attacked companies via unsecured remote access or vulnerabilities in public-facing services using attacks such as Log4Shell. But the return of many employees to the office after working from home, as well as the temporary discontinuation of Emotet, have also led to a decline.

The Malware Top 10 has changed considerably compared to 2020. On the one hand, there are many new malware families - a total of six of the ten most common malware strains are new. On the other, many different types of malware are represented in this ranking. Until recently, remote access Trojans have always made up a large part of the most frequent types of attack. One explanation for the ranking is that attackers are combining different types of malware with each other to increase profit. For example, they use Emotet as a malware distributor for the initial infection, derive data from the company with an information stealer such as Dridex, and then encrypt the systems with ransomware such as Shade.

The Malware Top 10 at a glance:

Previous year’s position in brackets

“The return of Emotet and vulnerabilities in systems accessible from the Internet are just two of the myriad challenges companies will have to deal with this year,” says Tim Berghoff. “Managers must face reality and make provisions for an IT emergency - just as they must have contingency plans for a fire. The probability of falling victim to a cyber attack is definitely higher than a fire in the office. And those who prepare for it are also able to act in a worst-case scenario and are back in action again more quickly.”