{"id":161609,"date":"2022-12-06T06:00:57","date_gmt":"2022-12-06T14:00:57","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=161609"},"modified":"2024-07-10T07:02:38","modified_gmt":"2024-07-10T14:02:38","slug":"mcafee-2023-threat-predictions-evolution-and-exploitation","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/mcafee-2023-threat-predictions-evolution-and-exploitation\/","title":{"rendered":"McAfee 2023 Threat Predictions: Evolution and Exploitation"},"content":{"rendered":"

As 2022 draws to a close, the Threat Research Team at McAfee Labs takes a look forward\u2014offering their predictions for 2023 and how its threat landscape may take shape.\u00a0<\/span>\u00a0<\/span><\/p>\n

This year saw the continued evolution of scams, which is unlikely to slow down, as well as greater adoption of Chrome as an operating system. It also saw the introduction of AI tools that are easy and accessible to virtually anyone with a phone or laptop, which will continue to have significant implications, as will the fluctuating popularity of cryptocurrency and the emergence of \u201cWeb3.\u201d\u00a0<\/span>\u00a0<\/span><\/p>\n

Advances such as these have set the stage for 2023, which will continue to reshape our interactions with technology\u2014advances that bad actors will try to exploit, and in turn, us.\u00a0<\/span>\u00a0<\/span><\/p>\n

Yet as the threat landscape continues to evolve, so do the ways we can protect ourselves. With that, we share McAfee\u2019s threat predictions for 2023, along with insights and advice that can help us enjoy the advances to come with confidence.<\/span>\u00a0<\/span><\/p>\n

AI Goes Mainstream and the Distribution of Disinformation Rises<\/span><\/b>\u00a0<\/span><\/h2>\n

By Steve Grobman, Chief Technology Officer<\/span>\u00a0<\/span><\/p>\n

Humans have been fascinated by artificial intelligence (AI) for almost as long as we\u2019ve been using computers. And in some cases, even fearful of it. Depictions in pop culture range from HAL, the sentient computer from 2001: A Space Odyssey to Skynet, the self-aware neural network at the center of the Terminator franchise. The reality of current AI technologies is both more complicated and less autonomous than either of these. While AI is rapidly evolving, humans remain at the heart of it, and whether it\u2019s put to beneficial or nefarious use.<\/span>\u00a0<\/span><\/p>\n

Within the last few months, creating AI-generated images, videos, and even voices are no longer strictly left to professionals. Now anyone with a phone or computer can take advantage of the technology using publicly available applications like Open AI\u2019s <\/span>Dall-E<\/span><\/a> or stability.ai\u2019s <\/span>Stable Diffusion<\/span><\/a>. Google has even made <\/span>creating AI-generated videos<\/span><\/a> easier than ever.<\/span>\u00a0<\/span><\/p>\n

What does this mean for the future?\u00a0 It means the next generation of content creation is becoming available to the masses and will only continue to evolve. People both at work and at home will have the ability to create the AI-generated content in minutes. Just as desktop publishing, photo editing, and inexpensive photorealistic home printers created major advances that empowered individuals to create content that previously required a professional designer, these technologies will enable sophisticated outputs with minimal expertise or effort.\u00a0\u00a0<\/span>\u00a0<\/span><\/p>\n

Advances in desktop publishing and consumer printing also provided benefits to criminals, enabling better counterfeiting and more realistic manipulation of images. Similarly, these emerging next-generation content tools will also be used by a range of bad actors. From cybercriminals to those seeking to falsely influence public opinion, these tools will empower scammers and propagandists to take their tradecraft to the next level with more realistic results and significantly improved efficiency.\u00a0<\/span>\u00a0<\/span><\/p>\n

This is especially likely to ramp up in 2023 as the U.S. begins the 2024 presidential election cycle in earnest. Globally, the political environment is polarized. The confluence of the emergence of accessible next-generation generative AI tools and what is sure to be a highly contested 2024 election season is a perfect storm for creating and distributing disinformation for political and monetary gain. <\/span>\u00a0<\/span><\/p>\n

We\u2019ll all need to be more mindful of the content we consume and the sources that it originates from. Fact-checking images, videos, and news content, something that\u2019s already on the rise, will continue to be a necessary and valuable part of media consumption.<\/span>\u00a0<\/span><\/p>\n

New Year, New Scams<\/span><\/b>\u00a0<\/span><\/h2>\n

By Oliver Devane, Security Researcher<\/span>\u00a0<\/span><\/p>\n

Cryptocurrency scams<\/span><\/b>\u00a0<\/span><\/p>\n

In 2022 we saw several online scams making use of existing content to make crypto scams more believable. One such example was the <\/span>double your money cryptocurrency scam<\/span><\/a> that used an old Elon Musk video as a lure. We expect such scams to evolve in 2023 and make use of deep fake videos, as well as audio, to trick victims into parting ways with their hard-earned money.\u00a0<\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

Investment scams<\/span><\/b>\u00a0<\/span><\/h3>\n

The financial outlook of 2023 remains uncertain for many people. During these times, people often look for ways to make some extra money and this can lead them vulnerable to social media messages and online ads that offer huge financial gains for little investment.\u202f\u202f<\/span>\u00a0<\/span><\/p>\n

According to the <\/span>IC3 2021<\/span><\/a> report, the losses for financial scams increased from $336,469,000 in 2020 to $1,455,943,193 in 2021, this shows that this type of scam is growing by an enormous amount, and we expect this to continue.<\/span>\u00a0<\/span><\/p>\n

Fake loans<\/span><\/b>\u00a0<\/span><\/h3>\n

Unfortunately, scammers will often target the most vulnerable people. Fake loan scams are one such scam where the scammers know that the victims are desperate for the loan and therefore are less likely to react to warning signs such as asking for an upfront fee. McAfee predicts that there will be a large increase in these types of scams in 2023. When looking for a loan, always use a trusted provider and be careful of clicking on online ads.\u00a0<\/span>\u00a0<\/span><\/p>\n

Metaverse<\/span><\/b>\u00a0<\/span><\/h3>\n

Metaverses such as Facebook’s Horizon enable their users to explore an online world that was previously unimaginable. When these platforms are in the early stages, malicious actors will usually attempt to exploit the lack of understanding of how they work and use this to scam people. We have observed phishing campaigns targeting users of these platforms in 2022 and we expect this to increase dramatically in 2023 as more and more users sign up for the platforms.\u00a0\u00a0<\/span>\u00a0<\/span><\/p>\n

The Rise of ChromeOS Threats<\/span><\/b>\u00a0<\/span><\/h3>\n

By Craig Schmugar, McAfee Senior Principal Engineer<\/span>\u00a0<\/span><\/p>\n

More than 25 years ago, Windows 95 became the platform of choice not just for millions of users around the globe, but for malware authors targeting those users.\u202fOver the years, Windows has evolved, as has the threat landscape.\u202fToday, Windows 10 and 11 make up the majority of the desktop PC market, but thanks to the rise of the mobile Internet, device diversity has greatly evolved since the advent of Windows 95.\u202f\u00a0<\/span>\u00a0<\/span><\/p>\n

Over five years ago, <\/span>Android overtook Windows as the world’s most popular OS<\/span><\/a> and with this shift bad actors have been pursing alternative methods of attack.\u202fThe ultimate vectors are those which impact users across a spectrum of devices.\u202fEmail and web-based scams (some of which are outlined in the blog above) are as prolific as ever as these technologies are ubiquitous across desktop and mobile devices.\u202f<\/span>\u00a0<\/span><\/p>\n

Meanwhile, other technologies span across desktop and mobile experiences as well. For Google, such cross-platform capabilities are highlighted by increased adoption of ChromeOS and a few underlying technologies.\u202fThis includes 270 million active Android users and a 270% increase in Progressive Web Application (PWA) installations [<\/span>https:\/\/chromeos.dev<\/span><\/a>].\u202f ChromeOS\u2019 ability to run Android applications, combined with its wide-spread adoption, provides the climate for increased attention by those with ill intentions.\u202f\u00a0<\/span>\u00a0<\/span><\/p>\n

Similarly, adoption of PWAs provide bad actors with additional incentive to deliver deceptive and imposter attacks through this multi-OS channel, including ChromeOS, iOS, MacOS, and Windows.\u202f\u00a0<\/span>\u00a0<\/span><\/p>\n

Finally, on the heels of COVID restrictions that impacted schools in various countries, Google reported 50 million students and educators worldwide [<\/span>https:\/\/chromeos.dev<\/span><\/a>] using ChromeOS. Many users will be unaware of <\/span>malicious Chrome extensions<\/span><\/a> lurking in the Chrome Web Store.<\/span>\u00a0<\/span><\/p>\n

All of this means that the stage is set for a marked increase in threats impacting Chromebook in the year to come. In 2023, we can expect to see Chromebook users among millions of unsuspecting victims that download and run malicious content, whether from malicious Android Apps, Progressive Web Apps, or Chrome Web Store extensions, users should be leery of popups and push notifications urging them to install untrusted apps.<\/span>\u00a0<\/span><\/p>\n

Web3 Threats will take advantage of FOMO<\/span><\/b>\u00a0<\/span><\/h2>\n

By Fernando Ruiz, Senior Security Researcher<\/span>\u00a0<\/span><\/p>\n

Editor\u2019s Note: Web3? FOMO? If you\u2019re already lost, you\u2019re not alone. Web3 is a term some use to encompass decentralized internet services, technologies like Bitcoin and Non-Fungible Tokens (digital art that collectors can purchase with cryptocurrency). Still confused? A lot of people are. This New York Times article is a <\/span><\/i>good primer on what is currently considered Web3<\/span><\/i><\/a>.\u00a0\u00a0<\/span><\/i>\u00a0<\/span><\/p>\n

As for FOMO, that\u2019s just an acronym meaning the \u201cFear of Missing Out.\u201d That nagging feeling, most often felt by extroverts, that others are out there having more fun than them and that they\u2019re missing the party.\u00a0<\/span><\/i><\/p>\n

Whether you invest in cryptocurrency or just see the headlines on Twitter, no doubt you\u2019ve seen that the price of cryptocurrency has sharply declined during 2022. These fluctuations are becoming more normal as crypto becomes even more mainstream. It\u2019s very likely that the value of crypto will rise again.\u00a0<\/span>\u00a0<\/span><\/p>\n

When the last upturn in valuation happened near the start of the pandemic, the hype about crypto also skyrocketed. Suddenly Bitcoin and other cryptocurrencies were everywhere. Out of that, rose the concept of Web3, with more companies investing in new applications over blockchain (the technology that is the backbone of cryptocurrency).\u00a0<\/span>\u00a0<\/span><\/p>\n

McAfee predicts that the popularity of cryptocurrency will rise again, and consumers will hear much more about Web3 concepts like <\/span>decentralized finance<\/span><\/a> (DeFi), <\/span>decentralized autonomous organizations<\/span><\/a> (DAOs), <\/span>self-sovereign identity<\/span> (SSI) and more.\u00a0<\/span>\u00a0<\/span><\/p>\n

Some amateur investors, remembering the rapid rise of the value of Bitcoin earlier this decade, won\u2019t want to miss out on what they think will be a great opportunity to get rich quick. It\u2019s this group that bad actors will seek to exploit, offering up links or applications that play on these users\u2019 crypto\/Web3 FOMO.\u00a0<\/span>\u00a0<\/span><\/p>\n

As crypto bounces back and initial awareness of decentralization grows in the general population, consumers will begin to explore these Web3 offerings without fully understanding what they mean or what dangers they should be aware of, leaving them open to scams as they invest time and money into crypto or creating their own <\/span>NFT content<\/span><\/a>. These scams could entice users to click on a link or download an app that appears to legitimately interact with some blockchains, but in actuality:\u00a0<\/span>\u00a0<\/span><\/p>\n