In light of this growing threat, Kaspersky has launched a dedicated landing page to raise awareness of the issue and provide strategies for mitigating associated risks.
About 10,000,000 personal and corporate devices were compromised with data-stealing malware in 2023, amounting to a 643 percent increase over the past three years, Kaspersky Digital Footprint Intelligence data shows.The data on infected devices stems from the dynamics of infostealer malware log-files actively traded in the underground markets and monitored by Kaspersky to help companies ensure the security of their clients and employees.
The number of infections with data-stealing malware, 2020-2023. Source: Kaspersky Digital Footprint Intelligence
Even though the number of log-files – and therefore infections – in 2023 has only experienced a marginal decline of 9 percent compared to 2022, it doesn’t imply that cybercriminal demand for logins and passwords has stagnated. It is possible that some credentials compromised in 2023 could be leaked to the dark web at some point during the current year. Therefore, the actual number of infections is likely to be even higher than 10 million. According to Kaspersky's assessment of infostealer log-file dynamics, the number of infections that occurred in 2023 is projected to reach roughly 16,000,000.
Cybercriminals steal an average of 50.9 login credentials per infected device. Threat actors either utilize these credentials for their own malicious purposes, including perpetrating cyberattacks, or sell or distribute them freely on dark web forums and shadow Telegram channels.
These credentials may encompass logins for social media, online banking services, crypto wallets, and various corporate online services, such as email and internal systems. According to Kaspersky’s data, 443,000 websites worldwide have experienced compromised credentials in the past 5 years.
Regarding the number of compromised accounts, the .com domain takes the lead. Nearly 326 million logins and passwords for websites on this domain were compromised by infostealers in 2023. Next is the .br domain for Brazil, with 29 million compromised accounts, followed by .in, associated with India, with 8 million, .co (Colombia) with nearly 6 million, and .vn (Vietnam) with over 5,5 million.[1]
|
Top-level domain extension | Number of compromised credentials per domain, 2023 |
1 | .com | 325,900,000 |
2 | .br | 28,800,000 |
3 | .in | 8,200,000 |
4 | .co | 6,000,000 |
5 | .vn | 5,500,000 |
To guard against data-stealing malware, individuals are advised to use a comprehensive security solution for any device. This will help prevent infections and alert them to dangers, such as suspicious sites or phishing emails that can be an initial vector for infection. Moreover, companies can help their users, employees and partners protect themselves from the threat this way. They can proactively monitor leaks and prompt users to change leaked passwords immediately.
More information about infostealer threat landscape is gathered at Kaspersky Digital Footprint Intelligence website.
About Kaspersky
Kaspersky is a global cybersecurity and digital
privacy company founded in 1997. Kaspersky’s deep threat intelligence and
security expertise is constantly transforming into innovative solutions and
services to protect businesses, critical infrastructure, governments and
consumers around the globe. The company’s comprehensive security portfolio
includes leading endpoint protection, specialized security products and
services, as well as Cyber Immune solutions to fight sophisticated and evolving
digital threats. Over 400 million users are protected by Kaspersky technologies
and we help over 220,000 corporate clients protect what matters most to them.
Learn more at www.kaspersky.com.
[1] The country code top-level domain (ccTLD) is generally reserved for use in a specific country. However, it can also be utilized by worldwide operating websites that are not necessarily related to a specific country, thereby affecting the statistics
We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.