Cloud-based security threats are growing at a faster rate than ever, as threat actors find new and innovative ways to push malware (opens in new tab) through the novel technology.
Netskope's latest Cloud & Threat Report: Global Cloud and Web Malware Trends paper found more than half (55%) of all HTTP and HTTPS malware downloads came from cloud apps, up from 35% for the same period a year before.
That makes it more than a 50% jump year-on-year.
Malicious apps multiplying
The rise is due to an increase in people downloading malware from popular enterprise cloud applications, Netskope further claims. Microsoft’s OneDrive is seen as the most popular enterprise app “by a wide margin”. Furthermore, the number of applications with malware downloads also continued rising, with Netskope identifying 261 different malicious apps in Q1 this year.
To make matters worse, malware delivered over what’s considered “risky web categories” makes up but a tiny portion of total web malware downloads, with the majority of the downloads being spread out over different sites. Content delivery networks (CDNs) are actually used the most, with a market share of 7.7%.
In general, five in 1,000 enterprise users tried to download malware in Q1 2023, with new variants taking up almost three-quarters (72%) of those downloads. What’s more, almost 10% of all downloads started with a search engine query, as threat actors weaponize data voids and SEO poisoning for queries that have very few results. “This represents just one of many social engineering techniques that attackers are accelerating,” the researchers say.
Finally, social engineering reigns supreme as the key malware delivery technique with email, collaboration apps, and chat apps, are being leveraged to trick people into downloading malware. Trojans are the most popular malware type with 60% of all downloads. Phishing downloads took up 13%.
English
Arabic
Belarusian
Bengali
Bosnian
Bulgarian
Chinese (Simplified)
Croatian
Czech
Danish
Dutch
Estonian
Filipino
Finnish
French
Georgian
German
Greek
Gujarati
Hausa
Hebrew
Hindi
Hmong
Hungarian
Igbo
Indonesian
Italian
Japanese
Javanese
Kazakh
Korean
Kurdish (Kurmanji)
Kyrgyz
Lao
Latvian
Lithuanian
Macedonian
Malagasy
Norwegian
Persian
Polish
Portuguese
Punjabi
Romanian
Russian
Serbian
Slovak
Slovenian
Spanish
Swedish
Thai
Turkish
Ukrainian
Vietnamese
Yoruba