

Figure 4 – Windows PE Top attacked countries in Q1 Notables are also Italy, the US, and Russia as major Windows PE malware target markets. On the global cyberthreat heat map, the most attacked countries were Egypt, Indonesia, Germany, China, and Brazil. Figure 3- Windows PE detection categories in Q1

Overall, the global number of Windows malware detections increased from 8.89 million in Q3 2021 to 8.91 million in Q1 2022, with a peak in February 2022, when over 3 million unique users’ devices were attacked. Within this category, most cyberattacks can be attributed to Trojan, PUA, Riskware, and File infectors. Historically, PE malware has always been the largest cyberthreat section, which can largely be traced back to the popularity of Microsoft Windows for both private home and business use.
AVIRA SECURITY 2021 PORTABLE
Portable Executable (or PE in short) is commonly used to describe binary executables within the Microsoft Windows operating system.

Figure 2 – Countries with an increased share of global detections in 22Q1 vs 21Q4 II. However, when considering the total volume, the picture is slightly different: Egypt, the United States, Brazil, Indonesia, Germany, and China remain the countries where Avira detects the highest number of cyberattacks.

The chart below shows the countries with an increased share of cyberthreat attacks in the first months of 2022 compared to the second half of 2021. Looking at cyberattacks on a global level, the biggest increase in attacks has been seen in Egypt, followed by Italy and Brazil. The macOS platform has also seen a significant growth in attack volume this year. Mobile cyberthreats stayed stable with no noticeable increase or decline, while the spread of Coinminer malware went down significantly. This trend is a continuation of what has been seen for many months now, with more and more cyberthreat actors leveraging a more dynamic approach utilizing scripts and office documents as initial cyberattack vector. With traditional Windows malware, such as Ransomware, Trojans, Worms and File infectors slightly decreasing in prevalence, we saw an uptick in exploit usage, script malware and document-based threats. While the Ukraine conflict has not influenced malware campaigns worldwide as much as Covid-19 did, the global cyberattack volume registered by Avira did grow by nearly 2% from calendar Q4 2021 to Q1 2022.
