With ‘stay at home – stay safe’ being the new motto for 2020, and adult content platforms experiencing an influx of visitors, security risks in this field have never been so relevant.
A review of 2019 threat activity by Kaspersky researchers demonstrates that the number of mobile users attacked by adult content doubled in 2019, reaching 42 973 users compared to the 19 699 who were targeted in 2018.
Adult content, just as is the case with other types of entertainment, remains one of the most prominent ways malefactors try to infect devices.
Moreover, due to its rather sensitive nature and the reasonable desire amongst users to keep their browsing experience private, adult content remains of particular interest to cybercriminals.
While various schemes involving phishing, spam and even various sex-related ransomware have been around for years, cybercriminals do not stop at that and continually work on expanding attack vectors and perfecting the methods of those attacks.
With the rise of mobile devices that can be used for virtually anything – from work to entertainment – porn-related mobile threats are becoming more relevant as well.
To learn more about mobile threats related to illicit content, Kaspersky checked all files disguised as adult videos or adult content related installation packages for Android and ran 200 popular adult content tags against this database.
The analysis showed results for 105 tags in 2018 and for 99 tags in 2019, demonstrating that not all adult content is used by cybercriminals to target their victims.
Additional analysis demonstrated that content that can be rated as violent was hardly ever used for spreading malware.
Even though fewer tags were used to spread threats disguised as porn in 2019, the number of users attacked by mobile porn-related threats and potentially unwanted applications doubled – reaching 42 973 users attacked compared to 19 699 in 2018. Interestingly, the opposite trend was witnessed for the PC-threats, which dropped by almost 40%.
Advertisement software, used to show and redirect users to unwanted advertising pages, remains the most prominent mobile threat both in variety and in the number of attacked users. Out of the top 10 porn-related threats for mobile users in 2019, seven belonged to this class of threat.
Most users have been targeted by advertisement application detected as AdWare.AndroidOS.Agent.f, with 35,18% of mobile users targeted by it in 2019. This type of threat is typically distributed through various affiliate programs, which has a purpose to earn money per installation or for the victim to download malicious applications.
“As users are becoming more mobile, so are cybercriminals,” comments Dmitry Galov, security researcher at Kaspersky. “We have seen that although PC malware distribution has been dropping, mobile malware is on the rise.
“While we have not witnessed many changes in the techniques used by cybercriminals, statistics show that this topic remains a steady source of threats and users need to be aware of that, taking steps to protect access to the valuable data they keep on their devices.
“One cannot ignore how these attacks abuse user privacy as well – with data leaks and personal or private information being sold on the dark market for very small fees,” he adds. “Cybercriminals are now able to cross-reference various leaked databases of users, and hence make more informed decisions about the attacks, making them targeted rather than random, and hence, more effective.
“Users need to take more serious steps to protect themselves than ever through applying advanced security measures and educating themselves on handling their own data on the web and evaluating what risks their exposure entails.”
Other findings of the adult threat report include:
* Cybercriminals endeavour to have more flexibility in choosing what kind of malware to distribute, with nearly two in five users attacked by porn-related PC threats being hit by Trojan-Downloader (39,6%), that enable attackers to later install other types of malware.
* There was a drop in porn-related PC-threats, falling from 135 780 to 106 928 attacked users in 2018 and 2019 respectively.
* The number of users attacked by malware hunting for credentials that grant access to pornography websites has dropped, while the number of the malware attacks continues to grow, increasing by 37% from 2018 to 2019 and reaching 1 169 153 attacks in 2019. This demonstrates the persistence of the botnets in attacking the same users, a picture radically different to 2018.
* Privacy becomes an even bigger concern for the users when it comes to adult content. From leaked personal images to stolen premium pornography sites subscriptions, this information remains in high demand with sex continuing to be a topic used by cybercriminals as an easy way to make money. On top of that, sextortion fraud is gaining momentum and is turning into separate “industry”.