Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Review of Regional Malware Trends in EMEA: Part 2

Summary: Unit 42's second EMEA regional report covers late 2016 into 2017 for the Netherlands, Belgium, Sweden, Denmark, Italy, Spain and Switzerland, tracking malware families and behaviors seen on Palo Alto's platforms. In the first four countries, the Netherlands accounted for almost three quarters of malicious network sessions and roughly one third of malware samples, Belgium saw the highest Cerber ransomware session volume, and Hancitor was among the most prevalent families common to all four.

Why it matters: The report argues that watching behaviors rather than family names has broader value, citing the HttpNoUserAgent tag - HTTP traffic with a missing or blank user-agent - which spans multiple malware families and is appearing in more WildFire samples; a security leader can hunt on that single behavior across many adversaries' playbooks.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related