McAfee Labs Threat Report assesses ransomware threats

A cyber threats report generated by the computer security software firm McAfee determined ransomware attacks grew by 118 percent in the first quarter of this year.

The McAfee Labs Threats Report also revealed the detection of new ransomware families and the implementation of innovative attack techniques.

At the beginning of the year, McAfee’s Advanced Threat Research team served as the first group to discover a new ransomware family dubbed Anatova, which officials said is designed to cipher all files before requesting payment from the victim.

Researchers noted Anatova’s architecture is modular, a unique element that could facilitate future development of ransomware.

Investigators said the work also showed cybercriminals continue to use spear-phishing tactics while they are also gaining access to a company that has open and exposed remote access points, such as RDP and virtual network computing (VNC).

RDP credentials can be obtained from password leaks or bought in underground markets. Whereas ransomware criminals would previously establish a command and control environment for ransomware and decryption keys, authorities said a growing number of criminals now approach victims with ransom notes including an anonymous email service address, allowing alleged perpetrators to have greater cover.