Top 10 Malware Q4 2024

MS-ISAC’s Q4 2024 Top 10 Malware report identifies SocGholish (53%) as the most prevalent threat, followed by CoinMiner, Arechclient2, NanoCore, Agent Tesla, Ratenjay, ZPHP, DarkGate, Jupyter, and LandUpdate808, with malvertisement leading initial infection vectors due to active SocGholish, LandUpdate808, ZPHP, and Jupyter campaigns. The report outlines each malware’s capabilities and distribution methods and supplies extensive IOCs (domains, IPs, URLs, hashes) to support detection and threat hunting, advising admins to vet indicators before blocking.