Ransomware has emerged as the most prevalent form of malware as a service (MaaS) over the past seven years.
This data is based on a new report by the Kaspersky Digital Footprint Intelligence team that analyzed 97 malware families distributed on the dark web and other resources between 2015 and 2022.
Specifically, the study revealed that ransomware accounted for 58% of all malware families distributed under the MaaS model during the study period.
Additionally, the study found that 24% of malware families sold as a service were classified as information thieves (threats designed to allow threat actors to steal sensitive data of victims such as credentials, passwords and banking information). malware tool).
Read more about infostealer: Infostealer malware surge: 670% increase in stolen logs in Russian market
The remaining 18% consist of botnets, loaders, and backdoors used to upload and execute other malware on targeted devices.
“For example, the price of the loader Matanbuchus tends to fluctuate over time,” said Kaspersky Digital Footprint Analyst Alexander Zavlovski.
“This type of malware is more expensive than information-stealing programs. You don’t have to pay extra for
The research also highlighted the hierarchical structure of the MaaS ecosystem, where cybercriminals act as ‘operators’ and those who purchase services are called ‘affiliates’.
Affiliates will have access to various components of MaaS such as Command and Control Panels, Builders and Support, allowing them to control and coordinate their attacks.
“Cybercriminals actively trade illicit goods and services, including malware and stolen data, on shadow segments of the internet,” Zavlovski added. “By understanding how this market is structured, companies can gain insight into the modus operandi and motivations of potential attackers.”
To protect your organization from these threats, Kaspersky experts keep your software up-to-date to prevent exploitation of vulnerabilities and stay informed about current tactics used by threat actors. , recommends using tools to identify potential attack vectors.
Kaspersky’s report comes weeks after U.S. authorities claimed they had shut down a popular cybercriminal service on the dark web called “Card Check.”
