Trends in Web Threats: Attackers Were More Active During Holiday Season
Summary: Palo Alto Networks' web threat detection module recorded about 533,000 malicious landing URL incidents from October to December 2021, 120,753 of them unique, plus roughly 2,900,000 malicious host URL incidents, 165,255 unique. Activity peaked in November, which the report attributes to Black Friday, and the top threats were cryptominers, JS downloaders, web skimmers, web scams and JS redirectors.
Bottom line: The 120,753 unique landing URLs traced back to 21,430 domains, and the top apparently benign targets were personal sites and blogs, business and economy sites, and shopping sites - the ordinary pages your users visit first. The report also documents a web skimmer injected into a popular electronics shopping site that had few VirusTotal detections when found, using double-encrypted JavaScript to hide its command-and-control server.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026