Worst Malware and Threat Actors of 2018

Two reports call out the most serious malware attacks and attackers of the year (so far).

According to a new report issued by Webroot, among the worst are three large botnets. The list starts with Emotet, included because of its ability to spread laterally within a victim’s network. Trickbot follows, both on the list and in the wild, adding capabilities (including the ability to carry ransomware payloads) to the ones introduced by Emotet. Zeus Panda is the third member of the botnet and banking Trojan trio, included because it employs a wide variety of distribution methods to infect its victims.

AlienVault, an AT&T company, has released its own report that looks at the top threats and exploits seen in the first half of the year. It finds that malicious actors are broadening the horizons on which they attack and constantly shifting their approaches to evade detection and remediation.

One of the areas AlienVault’s research looked at is major threat actors; this year, Lazarus took the No. 1 spot from Fancy Bear as the most-reported. The top 10 malicious actors were distributed across the globe, launching threats from North Korea (two groups), Russia (three), Iran (two), China (two), and India (one). According to the Webroot report, those top malicious actors have been busy in both rentable malware networks and ransomware. Webroot identifies the three worst ransomware actors for 2018 as Crysis/Dharma, GandCrab, and SamSam.

Read more: Dark Reading