CYREN Cyber Threat Report: Malware Distribution Peaks on Fridays to Target Employees' Less Protected Weekend Internet Access

Report also shows that sophisticated phishing scams abound in order to gather valuable corporate data while spam levels hit a six-year low in September

Nov 04, 2015, 05:00 ET from CYREN

MCLEAN, Va., Nov. 4, 2015 /PRNewswire/ -- CYREN (NASDAQ: CYRN) today announced the release of its latest CYREN Cyber Threat Report that examines trends surrounding malware, phishing, spam and other online threats. The full report is available to download here.

Friday Malware Spike Results in Busy Mondays for IT Security Professionals
In the report, CYREN research confirms long-held suspicions that criminals are purposely intensifying their malware distribution on Fridays in order to take advantage of employees who are less protected over the weekend. Examining daily malware distribution trends during Q3 2015, CYREN detected an average of 2.25 billion malware attachments on Fridays – that's more than triple the number seen on Mondays during the same quarter.

CYREN's findings validate the theory that Monday mornings are one of the most common times for threats and breaches to appear on corporate networks due to employees downloading unsafe content on Saturdays and Sundays when using unsecured networks. When employees take their devices home over the weekend, they often connect to the Internet through public or personal unsecured Wi-Fi networks, and proceed to surf the web, download content, and click on links delivered through email.

Sophisticated Phishing Emails Target Corporate and Government Email Credentials
The report also describes a new phishing campaign that specifically targets organizations, not individuals. The criminals attempt to gain the name of the victim's employer as well as their names, email address, password and phone number, using spoofed images from well-known and reputable cloud service companies such as LinkedIn, Apple, and Amazon.

CYREN analysts believe this may be part of a long-term threat process in which criminals are trying to amass corporate login data to eventually be sold and/or used in corporate breaches. The attacks may also be intended to target well-known webmail services that can be used to access corporate data. In most cases the phishing websites are legitimate websites that have been compromised. HTML code is then embedded in the hacked site, providing an almost identical phishing experience wherever it is found.

"These latest malware and phishing findings come on the heels of Cyber Security Awareness Month as well as a fresh CYREN survey that underscores just how difficult it is for the average user to identify a threat," said Lior Kohavi, CTO at CYREN. "Now, more than ever before, both individuals and enterprises should embrace cyber security awareness. Organizations must arm employees with knowledge of the vast, ever-changing tricks used by criminals. This complimentary quarterly Cyber Threat Report is part of CYREN's ongoing commitment to aiding in this effort."

Other report highlights include:

  • 6.25% of installed Android apps are malicious
  • Spam hit a six-year low in September with an average of 47.4 billion daily spam emails sent that month
  • The average number of daily spam emails detected by CYREN decreased to 52 billion in Q3 from 55 billion in Q2
  • Phishing URLs tracked by CYREN are down 19% from Q2 to Q3 – likely a normalizing trend from the significant jump seen in Q2

Founded in 1991, CYREN (NASDAQ and TASE: CYRN) is a long-time innovator in cyber security. Through full-function Security as a Service (SecaaS) and embedded deployment options, CYREN provides web, email, mobile and endpoint security solutions that are relied upon by the world's largest IT companies to protect against today's advanced threats. CYREN collects threat data and delivers real-time cyber intelligence through a unique global network of over 500,000 points of presence that processes 17 billion daily transactions and protects 600 million users. To learn more, visit


© 2015 CYREN Ltd. CYREN and GlobalView are trademarks of CYREN Ltd. Other company and product names may be trademarks of their respective owners.

U.S. Investor Contact:

CYREN Company Contact:

Garth Russell

Mike Myshrall, CFO 





Israel Investor Relations Contact:

CYREN Media Contact:

Iris Lubitch

Matthew Zintel


Zintel Public Relations




Photo -
Logo -