November Threat Outlook: Malware Targets Critical Infrastructure

The IT security company Checkpoint Software has published its malware trends report for the month of November. The statistics highlight the growing threat of the Androxgh0st malware, which has climbed to a joint first place with Fakeupdates with 6.91 percent of Swedish businesses affected. Researchers have also discovered that Androxgh0st exploits vulnerabilities in IoT devices and servers – important components of critical infrastructure.

Androxgh0st, which has integrated with the Mozi bot network, can now apply its strategies and thus attack systems via remote control and other methods of maintaining access that enable malicious activities such as denial of service attacks and data theft. The botnet infiltrates various systems through unpatched security holes and the integration of Mozi has significantly increased Androxgh0st's reach, making it possible to infect more and more devices with this code. Business and individuals have become increasingly dependent on IoT devices, which can be vulnerable without proper protection.

Critical infrastructure, which includes energy networks, transportation systems and healthcare, continues to be an attractive target for cybercriminals actors due to its important role in everyday life and society. Disruptions within these systems can spread widespread chaos, economic losses and be a direct threat to the public safety.

– The rise of Androxgh0st and the integration with Mozi show how cybercriminal actors are constantly developing their methods to access sensitive information, says Mats Ekdahl, security expert at Check Point Software. Business and organizations need to quickly both adapt and implement security measures that can identify and neutralize these threats, before they can cause extensive damage.

In addition to Androxgh0st and Fakeupdates in a shared first place with 6.91 percent, MrBeast takes the list in third place with 4.92 percent.