2016 Sees Massive Spike in Ransomware, Trend Micro Finds

2016 Sees Massive Spike in Ransomware, Trend Micro Finds

Security vendor Trend Micro released its

2016 Security Roundup

on Feb. 28, providing insight into a record year for vulnerabilities. The largest single trend noted in the report was the rise of ransomware in 2016. Trend Micro discovered 247 different ransomware families in 2016, a 752 percent increase over 2015. Ransomware takes different forms and attacks multiple types of IT data, though among the most popular is database files. The report also looks at another trend—business email compromise (BEC), an attack where organizations are tricked into paying fraudulent invoices. In 2016, BEC attacks caused an average of $140,000 in losses to companies around the world, Trend Micro found. In this slide show, eWEEK takes a look at some of the key highlights of the Trend Micro “2016 Security Roundup: A Record Year for Enterprise Threats” report.

New Forms of Ransomware Spikes

In 2016, Trend Micro discovered 247 different ransomware families, a 752 percent increase over 2015.

Ransomware Takes Aim at Database Files

Ransomware can attack nearly any type of data file, with some ransomware families going after specific data types. In 2016, Trend Micro found 96 different ransomware families targeting database files.

Business Email Compromise Targets the U.S.

While business email compromise (BEC) attacks are a global phenomenon, the single biggest target in 2016 was the U.S.

Trend Micro Discovers 765 Vulnerabilities in 2016 …

In 2016, Trend Micro and the Zero Day Initiative (ZDI), which Trend Micro acquired as part of the acquisition of TippingPoint from Hewlett Packard Enterprise last year, discovered a combined 765 vulnerabilities.

… But Discovers Fewer Microsoft Vulnerabilities in 2016

Looking at specific vendors, Trend Micro and ZDI discovered fewer vulnerabilities in Microsoft applications in 2016 than in 2015. That said, in 2016 the firm found more vulnerabilities in both Apple and Android than it did in 2015.

Use of Angler Exploit Kit Declines

At the beginning of 2016, Angler was the most dominant exploit kit in the world. After the June 2016 arrest of 50 people with ties to Angler, use of the exploit kit virtually disappeared.

Flash Remains an Exploit Kit Favorite

Although exploit kit use declined by the end of 2016, it still remains a threat. Looking at the specific vulnerabilities used in the various exploit kits, Trend Micro found that Adobe Flash vulnerabilities were the most common.