The Rise of Cybercrime in : Uncovering New Threats and Sophisticated Attacks Targeting Financial Services

In 2024, Radware’s research team conducted an eye-opening study that delves into the alarming rise of cybercrime sophistication, particularly within the financial services industry. By exploring deep-web hacker forums and analyzing over 26,000 cybercriminal discussions, the study uncovers a series of emerging threats, highlighting how cybercriminals are using increasingly advanced tools and tactics to breach systems and steal sensitive information. These findings reveal a rapidly evolving underground ecosystem that is reshaping the landscape of cybercrime. In this article, we summarize Radware’s discoveries and explore their implications on cybersecurity, particularly for organizations in the financial sector.

Key Findings from Radware’s 2024 Cybercrime Study

Radware’s 2024 study offers critical insights into the expanding world of cybercrime, revealing a surge in the sophistication of cyberattacks, especially those targeting the financial services sector. The research covered 46 deep-web hacker forums and more than 26,000 threads discussing various cybercriminal strategies, identifying several major threats that are currently on the rise. These include:

Infostealer Malware Economy: A significant portion of cybercriminal activities revolves around infostealers—malicious programs designed to steal sensitive information. Radware’s study highlighted the growing popularity of these “infostealer-as-a-service” offerings, with 3-4 mentions per forum daily. These services are modular, allowing hackers to purchase tailored solutions that integrate well with their existing toolkits.
Credential-as-a-Service: Another disturbing trend uncovered by the research is the rise of credential-as-a-service platforms. These services provide cybercriminals with freshly stolen credentials, organized by industry and location. The platform Combo Cloud, for example, saw a 46% increase in mentions from 2022 to 2024, showing how credential-based attacks are becoming more widespread and sophisticated.
OTP Bot Attacks: The study also documented a surge in One-Time Password (OTP) bot attacks. These bots automate social engineering tactics to bypass two-factor authentication (2FA) systems. By using automated voice calls or SMS impersonations, attackers can trick victims into revealing their authentication codes, giving cybercriminals full access to their accounts.
DDoS-as-a-Service: DDoS attacks are becoming increasingly advanced, with new tools like “Stressed Cat,” an AI-enabled DDoS tool, emerging in the market. This innovation allows attackers to bypass CAPTCHA systems, dramatically improving the success rate of these attacks while lowering costs.

Overall, Radware’s findings underscore the increasing complexity of cybercrime and the need for financial institutions and other organizations to adopt more proactive, intelligence-driven cybersecurity strategies to defend against these evolving threats.

What Undercode Say:

The analysis of Radware’s 2024 study reveals several underlying trends that highlight the growing sophistication and decentralization of cybercrime. One of the most significant takeaways is the shift toward subscription-based and modular malware solutions. This model allows attackers, whether individual hackers or Advanced Persistent Threat (APT) groups, to access tailored, user-friendly tools that streamline the attack process. These services are often marketed with customer support, lowering the barrier to entry for even novice cybercriminals.

The rise of infostealer-as-a-service offerings is a prime example of how the cybercrime ecosystem is evolving. This service allows cybercriminals to purchase customized malware that is compatible with their existing operations. With the increasing prevalence of these modular solutions, hackers can now execute attacks faster and with greater precision, resulting in more significant financial damage to organizations.

Credential-as-a-Service platforms, such as Combo Cloud, illustrate another key shift in the cybercrime landscape. These platforms are becoming more refined, offering credentials sorted by industry and location, making it easier for cybercriminals to target specific sectors. With more automated, organized systems, these platforms provide a one-stop shop for cybercriminals, simplifying the execution of their attacks.

Another noteworthy development is the use of OTP bots in social engineering attacks. These bots are capable of bypassing even sophisticated 2FA systems, which were once considered a significant barrier to account compromise. The use of AI to automate these attacks only increases the scale and effectiveness of these efforts, making it more difficult for individuals and organizations to defend against them.

The continued evolution of DDoS-as-a-Service platforms, such as the AI-enabled “Stressed Cat,” signals a new era of more efficient and cost-effective DDoS attacks. These tools allow attackers to generate massive volumes of traffic while avoiding detection, further complicating defense mechanisms. The integration of AI into these tools makes it easier for cybercriminals to conduct large-scale attacks without the need for a large botnet.

Lastly, the decentralization of cybercrime networks—where developers of malicious tools operate independently from the attackers using them—creates a more fragmented and harder-to-detect system. This structure makes it increasingly difficult for law enforcement and security experts to track and attribute malicious activities to specific individuals or groups. The rise of these fragmented networks means that organizations need to stay ahead of cybercriminals by adopting more proactive threat intelligence measures and ensuring their cybersecurity defenses are constantly evolving.

Fact Checker Results:

Infostealers as a Service: The growing popularity of infostealers is well-documented and corroborated by numerous cybersecurity reports, highlighting the shift toward modular, customizable malware solutions for cybercriminals.
Credential-as-a-Service: Platforms like Combo Cloud have been increasingly mentioned in cybercrime forums, confirming the trend of selling stolen credentials organized by industry and location.
OTP Bot Attacks: The use of OTP bots to bypass 2FA mechanisms is a rising concern in cybersecurity, supported by various threat intelligence reports on automated social engineering tactics.