Avast, a leader in digital security and privacy and brand of Gen, blocked an unprecedented 10 billion attacks in 2023 for a remarkable 49% increase year over year.

According to the latest quarterly Avast Threat Report, which looks at the threat landscape from October to December 2023, scams, phishing and malvertising continue to account for more than 75% of all cyberthreats. These threats often leverage malicious push notifications and new AI methods such as deepfakes to lure victims into sophisticated financial fraud. The past quarter was also marked by a surge in malware attacks utilising PDF files and new techniques of exploiting Google to steal information.

“In the past three months, we have seen cybercriminals move from relying only on social engineering to further exploiting trusted digital mediums, be it highly believable deepfake video scams or threats spreading through PDF files,” explains Jakub Křoustek, malware research director for Avast. “This trend not only reflects the ever-changing methods of cybercriminals but also highlights the vulnerabilities inherent in our everyday digital lives. Now more than ever, people need to verify what they encounter online and utilise tools to help stay safe.”

Careful what you open: PDF file deception

In the last quarter of 2023, Avast blocked more than 10 million PDF-based attacks, protecting more than four million users worldwide. Threat actors turned their attention to PDF files in the final months of the year, weaving a complex web of attacks. Avast researchers observed a spectrum of PDF-related threats and scams, ranging from simple lottery and dating scams to documents containing deceptive information such as phishing links directing people to pages mimicking well-known brands like Netflix or Amazon. Researchers also saw an uptick in complex campaigns delivering more sophisticated threats, including password stealers like AgentTesla.

The proliferation of PDF-based cyberthreats underscores a significant shift in the tactics of cybercriminals. PDF files are popular due to their platform-agnostic nature, which allows them to be seamlessly opened from any device, making them the ultimate delivery payload. Furthermore, PDF attachments are often allowed by default by spam gateways, adding another layer of vulnerability.

Scams get more aggressive

Web threats continued to dominate, with scams, phishing and malvertising ranking as the top threat types overall. The use of malicious browser push notifications escalated, becoming a preferred tool for scammers across various domains, from adult content sites to technical support scams.

Beyond the methods of delivery for scams, AI continues to help criminals create more believable scams. Deepfake videos, especially those endorsing investment scams, displayed a heightened level of sophistication in the final quarter of the year, challenging the ability to distinguish between real and fabricated content.

Information stealers exploit cookies

The final quarter of 2023 also brought a new and interesting stealing capability which was rapidly adapted by information stealers: abusing the Google OAuth endpoint, which is used for synchronising accounts across Google services, for recovering authentication cookies. This type of cookie can store a unique identifier that verifies a user’s identity and permissions when accessing websites. With authentication cookies, threat actors are able to gain access to login information and other sensitive data. One of the first info-stealers to adapt this technique was Lumma, a rapidly rising malware-as-a-service stealer, with others quickly following.

For more information and to read the full Avast Q4 2023 threat report, please visit decoded.avast.io/threatresearch/avast-q4-2023-threat-report.

Experience how you can protect your client’s business devices, applications, and data from one cloud-based security platform. With everything in one place, you’ll save time, effort, and money. You can tour the Avast Business Hub virtually or contact [email protected] for a live demo.

About Avert IT Distribution
When you partner with AvertITD, you invest in your own success and growth. This world-class distributor offers a superior range of cybersecurity solutions to protect your clients and your reputation.

AvertITD was established in 2004 and has continued to grow, evolve and develop since then. The company has partners across Africa and the Middle East and prioritises accountability, integrity and commitment so that these qualities and principles infuse everything that you then offer to your customers as a reseller. Find AvertITD on LinkedIn.

About Gen
Gen is a global company dedicated to powering digital freedom with a family of trusted brands including Norton, Avast, LifeLock, Avira, AVG, ReputationDefender and CCleaner. Our trust-based solutions help protect nearly 500 million users in more than 150 countries.

Become a reseller with Avert IT Distribution
Partner with AvertITD and find out how the Avast product range can help to secure you and your customers against cybersecurity threats. As a reseller, not only will you receive a free “not forrResale” and fully functional licence to use Avast on your own business network, but you will also receive preferential support, partner and reseller discounts as well as marketing material.

To become an Avert reseller, complete this form or contact an agent on +27(0)10 007 4430 (Johannesburg) or +27(0)21 007 2655 (Cape Town), or e-mail [email protected].