Cybersecurity threats targeting social media users in New Zealand are increasing, with phishing and malvertising identified as the most significant risks, according to the latest report from cybersecurity firm Gen.
The Q4 2024 Threat Report highlighted a 21% rise in extortion-based emails in New Zealand from October to December 2024.
Alongside phishing and malvertising, fraudulent e-commerce schemes and financial scams were among the most reported cyber threats. Phishing attempts were more prevalent in New Zealand than the global average, where fraudulent e-commerce scams dominated.
The report also noted a 157% rise in coinminer threats and a doubling of “scam-yourself” attacks, a scheme in which individuals are manipulated into exposing their own sensitive data.
Despite a 64% decline in financial scams as a share of malware in New Zealand, a slight increase was recorded in December.
The report stated that 2.55 billion cyber threats were blocked globally during the final quarter of 2024, averaging 321 threats per second. Social engineering tactics, which manipulate users into providing personal information, made up 86% of these blocked threats.
Gen’s cyber safety CTO, Siggi Stefnisson, warned that cyber scams are becoming more sophisticated.
“We’re continuing to see scam-related threats becoming far more dangerous as they hide, sometimes in plain sight, throughout every aspect of our digital life,” he said, as reported by Security Brief.
He added that in Q4 2024, the company saw scammers prey on people’s emotions, including the need to shop on budget during the holidays, the desire to find love during the end of the year, and the hope for change during government elections.
“Unfortunately, this is resulting in people continuing to lose money and control over their personal information. In 2025, we only expect these risks to increase as the rise of AI-powered systems and devices will mark the next frontier for cybercrime,” Stefnisson said.
The report identified Facebook, YouTube, and Telegram as the most commonly used platforms for cyber scams. Facebook accounted for 56% of reported social media threats, while Telegram was flagged for its privacy features, which allow scammers to operate with greater anonymity.
Mobile security risks also increased, with new malware such as DroidBot and ToxicPanda specifically designed to steal banking and cryptocurrency credentials. Additionally, spyware disguised as quick-loan applications was reported as an emerging threat.
The report found a 130% increase in scam-yourself attacks, often used for data theft and fraud. Meanwhile, ransomware incidents increased by 50%, underscoring the persistent challenges in securing online systems.
With cyber risks increasing, industry professionals in New Zealand and Australia have emphasised the need for stronger data security measures.
Keir Garrett, regional vice president for Cloudera in Australia and New Zealand, stated that compliance with data privacy regulations, including New Zealand’s Privacy Act 2020, is only one aspect of the solution. He suggested that organisations should also prioritise transparency and give individuals greater control over their personal data.
Ben Chamlet, senior director for solutions engineering at Twilio, addressed the impact of artificial intelligence (AI) on data privacy. Twilio’s research found that 60% of Australian consumers consider robust data protection a critical factor in building trust with businesses. Globally, nearly half of consumers said they would be more likely to trust a company that clearly explains how their data is used.
