A recently released cybersecurity report from Avast has highlighted the prevalence of social engineering in cyber threats during the first quarter of 2024. According to the report, almost 90% of cyberattacks on mobile devices and 87% on desktops involved scams, phishing, and malvertising, exploiting human vulnerabilities more than technical weaknesses.

The report also noted a significant increase in scams utilizing advanced technologies such as deepfake videos and AI-manipulated audio. These scams often utilize compromised YouTube channels and other social media platforms to spread fraudulent content. Cybercriminals are increasingly leveraging high-profile events and personalities to lend credibility to their scams.

YouTube has emerged as a key platform for these threats, with Avast's data showing that four million unique users were protected against YouTube-based threats in the previous year, with around 500,000 users shielded in the first quarter alone. Cybercriminals are exploiting YouTube's automated advertising and user-generated content features to bypass traditional security measures, deploying various attack methods from phishing to malware distribution.

The report outlined several common scam tactics observed on YouTube, including phishing campaigns targeting creators, posting videos with malicious links disguised as legitimate software downloads, channel hijacking, and the distribution of malware disguised as reputable software.

Beyond individual platforms, the report highlighted the growing trend of Malware-as-a-Service (MaaS) within cybercrime, where criminals rent out malware, enabling less experienced hackers to launch attacks. This model simplifies the process of executing cyberattacks, making advanced tools accessible to a wider range of criminals.

Specific malware types like DarkGate and Lumma Stealer were mentioned for their propagation methods, including spreading through platforms like Microsoft Teams and YouTube, highlighting the ongoing evolution of cybercriminal strategies and the importance of social engineering.

Jakub Kroustek, Malware Research Director at Gen, emphasized the severity of the situation, noting that the first quarter of 2024 reported the highest ever cyber risk ratio. He highlighted the focus of cybercriminals on exploiting human vulnerabilities, leveraging emotional responses and curiosity to gain access to personal and financial information.

As technically focused exploits in crypto have decreased over the past year, the report underscores the rising prominence of non-technical attacks. Human vulnerabilities remain a challenging aspect of cybersecurity, with AI advancements posing significant challenges for security experts.