Agentless Backup is Not a Myth

Cybercrims are switching tactics from traditional email-based mass security threats to lower volume targeted attacks, according to a report by Cisco Security Intelligence Operations.

A survey of more than 360 IT bods across 50 organisations found that in the past year the cost of email-based hacks - financial, stolen credentials, remediation - fell from $1bn to $300m but but scam and malicious attacks grew from $50m to $200m.

A number of high profile victims include RSA, Google and Sony,

Proliferation was compounded by the shift toward mobility, uncontrolled endpoints and IT policies focusing on identifying classic threats in messages or malicious downloads.

Spam message volumes fell by 80% from 300 billion to 40 billon a day as law enforcement agencies, along with security and IT industry firms worked together to "shut down or limit the largest spam-sending botnets and their associates".

Targeted attacks, which typically use some form of malware, are aimed at a specific user or user group - customers of a bank - containing high levels of personal info gleaned from dossiers collated on social networking sites, press releases or company correspondence.

"[These] are difficult to protect against and have the potential to deliver the most negative impact to victims," said the report, adding that the value per victim is roughly 40 times higher than a mass security attack.

"Spearphishing attack campaigns are limited in volume but offer higher user open and click through rates. With these constraints, cybercriminals are increasingly focusing on business users with access to corporate banking accounts to make sure they're seeing a sufficient return per infection." it added.

The cost to organisations not limited to financials or remediation of injected hosts but to the brand reputation of the victim.

"With the number of targeted attacks expected to increase cybercriminal activity will continue to evolve, as will its impact," the report concluded. ®

Steps to Take Before Choosing a Business Continuity Partner