RoughTed Malvertising Peaks in June, According to Check Point's Latest Global Threat Impact Index

World News: . []

SAN CARLOS, Calif., July 17, 2017 (GLOBE NEWSWIRE) -- Check Point Software Technologies Ltd. (NASDAQ:CHKP) has revealed that 28% of organizations globally were affected by the RoughTed malvertising campaign during June, according to the company’s latest Global Threat Impact Index. 

A large-scale malvertising campaign, RoughTed is used to deliver links to malicious websites and payloads such as scams, adware, exploit kits and ransomware. It began to spike in late May, before continuing to peak in June, impacting organizations in 150 countries. The most affected organisations by RoughTed were in the fields of communications, education, retail & wholesale. The malvertising related infection rates have spiked in recent months as attackers only have to compromise one online ad provider to reach a wide range of victims with little effort as there is no need to maintain a heavy distribution infrastructure for the malware.

Second placed Fireball, which impacted 20% of organizations in May, declined sharply and affected only 5% of businesses in June.  The Slammer worm was the third most common variant, impacting 4% of organizations.

The most prevalent malware highlight the wide range of attack vectors and targets cyber-criminals are utilizing, impacting all stages of the infection chain.  In contrast to RoughTed, Fireball takes over target browsers and turns them into zombies, which it can then use for a wide range of actions including dropping additional malware, or stealing valuable credentials, while Slammer is a memory resistant worm that can cause denial of service attacks.

This wide variety of attack vectors being utilized was reflected throughout the top ten common malware, which included the Cryptowall (4) and Jaff (6) ransomware, HackerDefender, a user mode root kit used to hide files, and Zeus (9) a banking Trojan.

In mobile malware, Hummingbad was the most common form of malware and was closely followed by Hiddad and Lootor:

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence, the largest collaborative network to fight cybercrime which delivers threat data and attack trends from a global network of threat sensors. The ThreatCloud database holds over 250 million addresses analyzed for bot discovery, more than 11 million malware signatures and over 5.5 million infected websites, and identifies millions of malware types daily.

* The complete list of the top 10 malware families in June can be found on the Check Point Blog:

Check Point’s Threat Prevention Resources are available at: 

____________________________ Based on Check Point’s ThreatCloud database of  250 million addresses analyzed

Check Point Software Technologies Ltd. () is the largest pure-play security vendor globally, provides industry-leading solutions, and protects customers from cyberattacks with an unmatched catch rate of malware and other types of attacks. Check Point offers a complete security architecture defending enterprises’ networks to mobile devices, in addition to the most comprehensive and intuitive security management. Check Point protects over 100,000 organizations of all sizes.

INVESTOR CONTACT:                                                                                    
Kip E. Meintzer                                                                                                
Check Point Software Technologies                                                        

Emilie Beneitez Lefebvre
Check Point Software Technologies
Tel: +44 (0) 7785 381 302

More news and information about Check Point Software

Published By:

Globe Newswire: 14:00 GMT Monday 17th July 2017

Published: .

Search for other references to "roughted" on SPi News

Previous StoryNext Story

SPi News is published by Sector Publishing Intelligence Ltd.
© Sector Publishing Intelligence Ltd 2017. [Admin Only]
Sector Publishing Intelligence Ltd.
Ground Floor Offices, Little Keep Gate, Barrack Road, Dorchester, Dorset DT1 1AH
Registered in England and Wales number 0751938.
Privacy Policy | Terms and Conditions | Contact Us

Advertising on SPi News: Information For Advertisers