Malicious Microsoft Office files are running rampant

security threat
(Image credit: Shutterstock.com)

Ever since the Covid-19 pandemic forced the majority of the world's workforce into a remote working environment, cybercriminals have been increasingly utilizing weaponized Microsoft Office files.

A new report from cybersecurity firm SonicWal claims it witnessed a 67% spike in the distribution of malicious Office files last year. The rising popularity of Office as means of malware distribution seems to have come at the expense of PDF files, whose use in malicious purposes dropped by almost a quarter (22%) in the same timeframe.

Many of the malware variants that are being distributed this way are brand new, SonicWall further claims. Its analysis of the threat landscape unveiled a 74% increase in the detection of entirely new malware variants, year-on-year. Last year, a total of 268,362 never-before-seen malware were identified, the report said.

IoT under attack

As a result of employees taking work equipment home, cybercriminals also amped up their efforts against IoT devices. SonicWall claims to have recorded a 66% increase in attacks against IoT devices, bringing the total number up to 56.9 million for the year.

Cryptojacking, a process of “hijacking” a device and using it to mine cryptocurrency, is also back on the radar, as Bitcoin and the gang reach new all-time-highs. 

Ransomware also seems unstoppable at the moment, growing by 62% globally. Ryuk, a relatively unknown name in the ransomware world at the beginning of the year, quickly rose to fame, becoming the go-to ransomware variant for most criminals. Today, SonicWall claims, more than 109 million cases were recorded, worldwide.

Of all the various companies and industries cybercriminals target with ransomware, retail has had it worst, the report further claims, adding that healthcare and government sectors were the second and third biggest targets for the year.

“2020 offered a perfect storm for cybercriminals and a critical tipping point for the cyber arms race,” said SonicWall President and CEO Bill Conner. 

“The pandemic — along with remote work, a charged political climate, record prices of cryptocurrency, and threat actors weaponizing cloud storage and tools — drove the effectiveness and volume of cyberattacks to new highs. This latest threat intelligence offers a look at how cybercriminals shifted and refined their tactics, painting a picture of what they are doing amid the uncertain future that lies ahead.”

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Android phone malware
Over 25 new malware variants created every single hour as smart device cyberattacks more than double in 2024
An iPhone sitting on a wooden table
Millions at risk as malicious PDF files designed to steal your data are flooding SMS inboxes - how to stay safe
Fraud
Hackers are tricking victims into scam-yourself attacks with fake tutorials, CAPTCHAs, and updates
Fraude en ligne phishing
Phishing clicks nearly tripled in 2024 as criminals aim for smarter attacks
Russian flag on a laptop
Hackers are using Russian domains to launch complex document-based phishing attacks
Flags of Iran, China, Russia and North Korea on a wall. China North Korea Iran Russia alliance
Cybercrime is helping fund rogue nations across the world - and it's only going to get worse, Google warns
Latest in Security
Woman shocked by online scam, holding her credit card outside
Cybercriminals used vendor backdoor to steal almost $600,000 of Taylor Swift tickets
Woman using iMessage on iPhone
UK government guidelines remove encryption advice following Apple backdoor spat
Cryptocurrencies
Ransomware’s favorite Russian crypto exchange seized by law enforcement
Wordpress brand logo on computer screen. Man typing on the keyboard.
Thousands of WordPress sites targeted with malicious plugin backdoor attacks
HTTPS in a browser address bar
Malicious "polymorphic" Chrome extensions can mimic other tools to trick victims
ransomware avast
Hackers spotted using unsecured webcam to launch cyberattack
Latest in News
MacBook Air mute key
The new M4 MacBook Air finally fixes an Apple keyboard annoyance that's been around for decades
A collage of Ellie and Joel in The Last of Us season 2
The Last of Us season 2's new trailer teases a huge showdown between Bella Ramsey's Ellie and Pedro Pascal's Joel, but the big moment I'm waiting for is still being held back
Apple iPhone 16 Pro Max REVIEW
New iPhone 17 Air leak may have revealed some key specs – and how it compares to the iPhone 17 Pro Max
Gaming with AI
I asked Gemini to play a text-based adventure game with me and the AI whisked me away to a word-based fantasy
Apple iPhone 16 Review
Three iPhone 17 model dummy units appear in a hands-on video leak
The Samsung Galaxy S25 Edge on display the January 22, 2025 Galaxy Unpacked event.
New Samsung Galaxy S25 Edge may have revealed some key details – including its price