Check Point released January 2018’s Top 10 ‘Most Wanted’ Malware

The latest report from checkpoint, the security company, the Global Malware Threat Impact Index, online released the top 10 malware of January 2018, most popular with cybercriminals.

Since January, cryptocurrency mining malware remains the most popular. Among them, Coinhive, the one that most reminds us of the first, is still at the top of the list since last month, affecting 23% of the global business.

In addition, according to the report, Fireball’s ranking soared from fifth in last month’s list to second in the month and affected nearly one-fifth of businesses worldwide. Correspondingly, Rig ek, the second-most-favored exploit tool last month, dropped to third place this month, though it still affects 17% of organizations worldwide.

It is noteworthy that security analysts at Check Point have also uncovered three variants of the cryptocurrency mining malware and are among the top ten on the list.

Top 10 Most Popular Malware

1. ↔Coinhive – Crypto-Miner designed to perform online mining of Monero cryptocurrency when a user visits a web page without the user’s approval.
2. ↑ Fireball – Browser-hijacker that can be turned into a full-functioning malware downloader.
3. ↔ Rig ek – Rig delivers Exploits for Flash, Java, Silverlight and Internet Explorer

4. ↔ Roughted – Large scale Malvertising used to deliver various malicious websites and payloads such as scams, adware, exploit kits and ransomware.
5. ↑JSEcoin – JavaScript miner that can be embedded in websites.
6. ↔ Globeimposter – Ransomware disguised as a variant of the Globe ransomware. Upon encryption, the ransomware appends the .crypt extension to each encrypted file.
7. ↑ Andromeda – Modular bot used mainly as a backdoor to deliver additional malware on infected hosts.
8. ↓ Cryptoloot – Crypto-Miner that uses the victim’s CPU or GPU power and existing resources for crypto mining – adding transactions to the blockchain and releasing new currency.
9. ↓ Ramnit – Banking Trojan that steals banking credentials, FTP passwords, session cookies and personal data.
10. ↑ Nivdort – Multipurpose bot used to collect passwords, modify system settings and download additional malware.

The three most popular mobile malware

1. Lokibot – Android banking Trojan and info-stealer, which can also turn into a ransomware that locks the phone.
2. Triada – Modular Backdoor for Android which grants superuser privileges to downloaded malware.
3. Hiddad – Android malware which repackages legitimate apps then releases them to a third-party store.

Source: checkpoint