A global cybersecurity firm says there will be a significant increase in dark web discussions surrounding cryptocurrency drainers (malware designed to quickly empty cryptocurrency wallets) in 2024. kaspersky.
The report also highlights a 40% increase in advertisements for corporate databases on prominent dark web forums, demonstrating cybercrime’s growing focus on data breaches.
Discussions about cryptocurrency emissions surge on the dark web
Kaspersky Digital Footprint Intelligence reported that dark web threads discussing cryptocurrency leakers jumped 135% from 55 in 2022 to 129 in 2024.
These threads often revolve around acquiring, selling, distributing, or forming teams for further distribution of malicious software.
Cryptocurrency leakers, which emerged about three years ago, trick victims into authorizing fraudulent transactions and steal their funds.
Common tactics include fake airdrops, phishing sites, malicious browser extensions, deceptive ads, malicious smart contracts, and fake NFT marketplaces.
According to Kaspersky expert Alexander Zabrowski, this trend is likely to continue into 2025, and security measures will need to be strengthened.
He urges companies to proactively monitor their online presence and combat fraudulent activity.
Money leakers frequently exploit well-known wallets and swap brands through social engineering to lure victims.
Increase in ads about data breaches
Kaspersky also observed a 40% year-over-year increase in posts promoting corporate databases on popular dark web forums from August to November 2024.
While some posts may feature old leaks repackaged as new ones, they highlight the continued demand for leaked corporate data.
Zabrowski explains that some infringing ads are fabricated, combining public data with previously leaked data to damage a company’s reputation or generate buzz.
He emphasizes the importance of monitoring mentions of companies on the dark web to enable prompt action.
Evolving cyber threats expected in 2025
Looking ahead to 2025, Kaspersky expects several developments in the cyber threat landscape.
Cybercriminals are expected to return to dark web forums from Telegram as the ban on Telegram channels has been strengthened.
2024 is expected to see an increase in major enforcement actions against cybercrime groups, and cybercriminals may join invite-only forums to avoid detection.
Ransomware groups can fragment into smaller, more agile units, making them harder to track and counter.
We also expect to see an increase in the use of stealers and drainers, as malware is increasingly distributed through malware-as-a-service models and stolen data is sold on shadow forums.
In the Middle East, geopolitical tensions are likely to fuel a surge in hacktivism and ransomware attacks, with the number of ransomware victims already increasing from an average of 28 per half in 2022-2023 to 45 in the first half of 2024. is increasing.
Featured image credit: Edited from freepic