Share this
DNSFilter Finds Rise in Malicious Domains Underscores Importance of Cybersecurity Awareness at All Levels
by DNSFilter Team on Oct 10, 2024 4:30:50 PM
Percentage of malicious domains is rising, requiring training and DNS protection
WASHINGTON, D.C. – Oct. 10, 2024 – New data from DNSFilter finds that threat levels have increased year-over-year, with malware remaining the most significant -- accounting for more than half of threat queries on the DNSFilter network. These findings are a stark reminder that all employees, regardless of technical skill level, need robust cybersecurity education and training as risks multiply.
Data from DNSFilter’s network shows that the percentage of unique domains the company’s users tried to access (but were blocked as threats) rose from 1.6% in Q3 2023 to 3.6% in Q3 2024 – a significant increase. Malicious domain queries as a whole represented more than 16.6 billion potential threats between July and September 2024. These threats include malware, phishing & deception, and botnet domains.
DNS remains a significant attack vector for malicious actors, with different industries facing specific types of threats. DNSFilter’s research found:
- The technology and education sectors have a high occurrence of phishing and deception sites. This necessitates a multi-pronged security strategy.
- The manufacturing sector is much more likely to encounter malware than phishing, which could be because it depends on legacy systems, which are usually easier to exploit.
- Crypto mining requests are the biggest threat in the telecommunication sector: Though the industry is a key target for cryptojacking, many companies still do not have policies for blocking crypto mining, which exposes them to avoidable security risks.
The data also shows that bad actors are making the most of current events.
- During the Paris Olympics, DNSFilter saw a sharp spike in traffic to potentially malicious domains containing the word “Olympic.” For example, on August 1, the spike peaked by a massive 546% above average for this time.
- With the advent of hurricane season, there was heightened activity in domains with the word “hurricane.” Malicious queries surged on Sept. 27 by 460% over the daily average for domains with this word.
Ken Carnesi, CEO and co-founder, DNSFilter, said: “Bad actors take advantage of both the highs and lows of life. Any person at any organization has the same chance of encountering a malicious link. The standard cyber hygiene tips apply: use unique passwords, verify who you are ‘talking’ to before handing over credentials, and think before you click. That last one is easy to forget sometimes, especially when people are in a hurry, so organizations need to leverage protective DNS to better safeguard employees.”
About the company:
DNSFilter is redefining how organizations secure their largest threat vector: the Internet itself. DNSFilter is making the Internet safer and workplaces more productive by blocking threats at the DNS layer. DNSFilter resolves upwards of 130 billion daily queries. With 79% of attacks using Domain Name System (DNS), DNSFilter provides the world’s fastest protective DNS powered by AI, blocking threats an average of 10 days faster than traditional threat feeds. Over 35 million users trust DNSFilter to protect them from phishing, malware, and advanced cyber threats.
Media Contact
Shannon Van Every
Force4 Technology Communications
Share this
Each year, cybersecurity companies publish a number of research reports focusing on different aspects of cybersecurity and breach trends. Below is a list of some of the most alarming statistics from several reports published throughout the year from various companies.
{% module_block module "widget_6aeb08dc-4790-47de-a546-385b24cb0188" %}{% module_attribute "button_text" is_json="true" %}"READ MORE"{% end_module_attribute %}{...Have you ever tried to build a machine learning classifier where you only had labels for one of the classes?
Almost every company is chasing the latest shiny object in an effort to be more competitive. The latest shiny object isAI, but before that, it was cloud, 5G, etc. The problem is that all of these new technologies also increase security risks — and the reality is that most organizations are ill-prepared for the existing security risks, let alone the new ones created by the addition of emerging technologies.