Home » today » Business » New WatchGuard Threat Lab Report Finds Threat Actors

New WatchGuard Threat Lab Report Finds Threat Actors

SEO-Friendly Headline:

WatchGuard’s Q2 2024 Internet Security Report Reveals New Malware Trends

WatchGuard Technologies Unveils Rising Cyber Threats in Latest Report

SEATTLE, Oct. 15, 2024 (GLOBE NEWSWIRE) – WatchGuard® Technologies, a pioneer in unified cybersecurity solutions, has released its highly anticipated Q2 2024 Internet Security Report. This report signals an alarming pivot in cyberattack strategies, revealing that seven out of the top ten malware threats were entirely new this quarter. Key players in this evolving landscape include Lumma Stealer, a sophisticated data-extracting malware, and variants of the Mirai Botnet, which repurposes smart devices into controlled robots.

The report, crafted by the WatchGuard Threat Lab, draws critical insights concerning the trends in malware, network security, and endpoint threats based on data acquired in the second quarter of 2024.

New Malware Threats on the Rise

The Q2 report highlights a disturbing trend in cybersecurity. Among the newly identified threats were:

  • Lumma Stealer: This advanced malware specializes in targeting sensitive information from compromised systems, posing a significant risk to both individuals and organizations.
  • Mirai Botnet Variant: Continuing its legacy, this malware infects various smart devices, converting them into remotely controlled bots, a tactic that has proven effective for several threat actors.
  • LokiBot Malware: Aiming at Windows and Android devices, LokiBot is focused on stealing usernames and passwords, further endangering user credentials.

In another substantial finding, the Threat Lab introduced the concept of “EtherHiding,” where attackers embed malicious PowerShell scripts into blockchains, such as those used for Binance Smart Contracts. By injecting a fake error message on compromised sites that misleadingly prompts users to "update their browser," attackers create an immutable source of malicious content, exploiting the inflexible nature of blockchain technologies.

Expert Insights on Evolving Threats

“Our observations in the Q2 2024 Internet Security Report illustrate a pattern in threat actor behaviors, showing how certain attack techniques rise and fall in prominence,” noted Corey Nachreiner, Chief Security Officer at WatchGuard Technologies. He highlighted the pressing need for regular updates and patched software to mitigate security vulnerabilities. “Employing a defense-in-depth strategy, effectively executed through a reliable managed service provider, remains a vital approach against these security challenges," he further explained.

Key Findings from the Q2 2024 Report

Several additional revelations emerged from the report:

  • Malware Detections Decrease: Total malware detections saw a 24% decline, primarily attributed to a 35% drop in signature-based detections. However, the Threat Lab noted a staggering 168% surge in evasive malware detections, as threat actors adapt their techniques.
  • Rise in Network Attacks: There was a notable 33% increase in network attacks compared to the previous quarter. The Asia Pacific region accounted for a staggering 56% of these detections, doubling its share within three months.
  • Prevalent Vulnerabilities: An NGINX vulnerability, first detected in 2019, emerged as the leading network attack by volume, accounting for 29% of total detections, translating to approximately 724,000 incidents across the U.S., EMEA, and APAC.
  • Emerging Endpoint Threats: The Fuzzbunch hacking toolkit, a legacy threat from the 2016 Shadow Brokers attack, ranked as the second-highest endpoint malware detected. Additionally, 74% of browser-initiated malware attacks targeted Chromium-based browsers—this includes widely used platforms like Google Chrome and Microsoft Edge.

Targeted Attacks and Emerging Trends

A specific attention-grabbing finding reported the trojan.html.hidden.1.gen signature as the fourth-most widespread malware variant. Phishing campaigns exploiting this signature commonly targeted institutions such as Valdosta State University in Georgia, highlighting the ongoing threat to educational entities.

Conclusion: What Lies Ahead?

The Q2 2024 Internet Security Report from WatchGuard paints a complex picture as cyber threats evolve. With new malware taking the forefront, the implications for businesses and individuals alike are profound.

Cybersecurity is not just the responsibility of IT departments but requires a collective approach involving all stakeholders—enterprises, service providers, and end-users. As these threats continue to intensify, the need for comprehensive awareness and proactive cybersecurity measures cannot be overstated.

For a more in-depth analysis of these findings, download the complete Q2 2024 Internet Security Report here.

As a community, how do you plan to tackle these emerging threats? Share your thoughts and strategies in the comments below.

For more insights into technology trends and cybersecurity, explore our articles on Shorty-News or stay updated with industry leaders like TechCrunch, The Verge, or Wired.


Maintaining cybersecurity requires vigilance and continual adaptation—what steps are you taking to protect yourself or your organization? Engage with us, and let’s discuss how we can make the digital world safer collectively.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.