Infostealer shakeup, new assault vector for cell, and Nomani

Large shifts within the infostealer scene, novel assault vector towards iOS and Android, and a large surge in funding scams on social media

28 Feb 2025
•
,
1 min. learn

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Generally, our telemetry knowledge looks like the waters of a peaceful bay, with small, easy waves gently rocking the ships anchored there to sleep. Different occasions, nonetheless, sturdy winds come and alter every part, bringing towering waves and scattering the ships far and wide, reworking the terrain of the bay itself within the course of.

ESET Menace Report H2 2024 felt a bit like that. Main malware households had been taken down by regulation enforcement; cell units noticed the delivery of a brand new, probably very engaging, assault vector focusing on each iOS and Android; there was one more legal “crypto gold rush”; and deepfake scams flooded social media.

Within the first part of this newest ESET Analysis Podcast episode, ESET Distinguished Researcher Aryeh Goretsky and Safety Consciousness Specialist Ondrej Kubovič talk about the infamous primary infostealer Agent Tesla being changed by its outdated competitor Formbook, the takedown of Redline Stealer and Meta Stealer, and a brand new social engineering method fueling the speedy progress of Lumma Stealer.

Additionally they take a more in-depth have a look at a novel assault vector that works for each Android and iOS units, one that’s misusing applied sciences permitting cell customers to put in apps immediately from web sites from cell browsers.

Within the last a part of the H2 2024 episode, Aryeh and Ondrej additionally go over the booming numbers of funding scams on social media, detected as HTML/Nomani, describing the seems to be, social engineering, and influence of this fraudulent exercise.

If any of the matters caught your curiosity, hearken to the newest episode of the ESET Analysis podcast. For those who desire the “print” model, obtain the total H2 2024 report from the Menace Studies part of WeLiveSecurity.com.