Malicious Microsoft Office files are running rampant

security threat
(Image credit: Shutterstock.com)

Ever since the Covid-19 pandemic forced the majority of the world's workforce into a remote working environment, cybercriminals have been increasingly utilizing weaponized Microsoft Office files.

A new report from cybersecurity firm SonicWal claims it witnessed a 67% spike in the distribution of malicious Office files last year. The rising popularity of Office as means of malware distribution seems to have come at the expense of PDF files, whose use in malicious purposes dropped by almost a quarter (22%) in the same timeframe.

Many of the malware variants that are being distributed this way are brand new, SonicWall further claims. Its analysis of the threat landscape unveiled a 74% increase in the detection of entirely new malware variants, year-on-year. Last year, a total of 268,362 never-before-seen malware were identified, the report said.

IoT under attack

As a result of employees taking work equipment home, cybercriminals also amped up their efforts against IoT devices. SonicWall claims to have recorded a 66% increase in attacks against IoT devices, bringing the total number up to 56.9 million for the year.

Cryptojacking, a process of “hijacking” a device and using it to mine cryptocurrency, is also back on the radar, as Bitcoin and the gang reach new all-time-highs. 

Ransomware also seems unstoppable at the moment, growing by 62% globally. Ryuk, a relatively unknown name in the ransomware world at the beginning of the year, quickly rose to fame, becoming the go-to ransomware variant for most criminals. Today, SonicWall claims, more than 109 million cases were recorded, worldwide.

Of all the various companies and industries cybercriminals target with ransomware, retail has had it worst, the report further claims, adding that healthcare and government sectors were the second and third biggest targets for the year.

“2020 offered a perfect storm for cybercriminals and a critical tipping point for the cyber arms race,” said SonicWall President and CEO Bill Conner. 

“The pandemic — along with remote work, a charged political climate, record prices of cryptocurrency, and threat actors weaponizing cloud storage and tools — drove the effectiveness and volume of cyberattacks to new highs. This latest threat intelligence offers a look at how cybercriminals shifted and refined their tactics, painting a picture of what they are doing amid the uncertain future that lies ahead.”

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Android phone malware
Over 25 new malware variants created every single hour as smart device cyberattacks more than double in 2024
An iPhone sitting on a wooden table
Millions at risk as malicious PDF files designed to steal your data are flooding SMS inboxes - how to stay safe
Best email services: image of email with one unread message alert
Over 400 million unwanted and malicious emails were received by businesses in 2024
Fraud
Hackers are tricking victims into scam-yourself attacks with fake tutorials, CAPTCHAs, and updates
Fraude en ligne phishing
Phishing clicks nearly tripled in 2024 as criminals aim for smarter attacks
Russian flag on a laptop
Hackers are using Russian domains to launch complex document-based phishing attacks
Latest in Security
person at a computer
Many workers are overconfident at spotting phishing attacks
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
Microsoft 365 accounts are under attack from new malware spoofing popular work apps
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
Latest in News
European Union technical background
EU tech companies push for digital sovereignty, reducing reliance on US and others
Star Wars Knights of the Old Republic
Knights of the Old Republic remake developer Saber Interactive states all its projects are 'still in development'
google nest
Google is slowly phasing out its Assistant helper to make room for Gemini's reign in smartphones - here’s how it’s doing the same for smart home devices
Renault 5 Turbo 3E
Renault unveils its wildest EV to date and it comes with in-wheel motors and a rally-style vertical handbrake for drifting
Circular smart ring
Circular's new smart ring is getting blood pressure and blood glucose monitoring before the Apple Watch
Gemini on a mobile phone.
Worryingly, Google Gemini’s new AI image generation features can be used to remove watermarks from images and I'm concerned