Feeds

Phishers switch focus to targeted attacks, warns Cisco

Looking for the higher-value victim

Beginner's guide to SSL certificates

Cybercrims are switching tactics from traditional email-based mass security threats to lower volume targeted attacks, according to a report by Cisco Security Intelligence Operations.

A survey of more than 360 IT bods across 50 organisations found that in the past year the cost of email-based hacks - financial, stolen credentials, remediation - fell from $1bn to $300m but but scam and malicious attacks grew from $50m to $200m.

"The business activity caused by highly-personalised targeted attacks is growing rapidly, tripling in the last year," stated the report.

A number of high profile victims include RSA, Google and Sony,

Proliferation was compounded by the shift toward mobility, uncontrolled endpoints and IT policies focusing on identifying classic threats in messages or malicious downloads.

Spam message volumes fell by 80% from 300 billion to 40 billon a day as law enforcement agencies, along with security and IT industry firms worked together to "shut down or limit the largest spam-sending botnets and their associates".

Targeted attacks, which typically use some form of malware, are aimed at a specific user or user group - customers of a bank - containing high levels of personal info gleaned from dossiers collated on social networking sites, press releases or company correspondence.

"[These] are difficult to protect against and have the potential to deliver the most negative impact to victims," said the report, adding that the value per victim is roughly 40 times higher than a mass security attack.

"Spearphishing attack campaigns are limited in volume but offer higher user open and click through rates. With these constraints, cybercriminals are increasingly focusing on business users with access to corporate banking accounts to make sure they're seeing a sufficient return per infection." it added.

The cost to organisations not limited to financials or remediation of injected hosts but to the brand reputation of the victim.

"With the number of targeted attacks expected to increase cybercriminal activity will continue to evolve, as will its impact," the report concluded. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.