Feeds

Phishers switch focus to targeted attacks, warns Cisco

Looking for the higher-value victim

5 things you didn’t know about cloud backup

Cybercrims are switching tactics from traditional email-based mass security threats to lower volume targeted attacks, according to a report by Cisco Security Intelligence Operations.

A survey of more than 360 IT bods across 50 organisations found that in the past year the cost of email-based hacks - financial, stolen credentials, remediation - fell from $1bn to $300m but but scam and malicious attacks grew from $50m to $200m.

"The business activity caused by highly-personalised targeted attacks is growing rapidly, tripling in the last year," stated the report.

A number of high profile victims include RSA, Google and Sony,

Proliferation was compounded by the shift toward mobility, uncontrolled endpoints and IT policies focusing on identifying classic threats in messages or malicious downloads.

Spam message volumes fell by 80% from 300 billion to 40 billon a day as law enforcement agencies, along with security and IT industry firms worked together to "shut down or limit the largest spam-sending botnets and their associates".

Targeted attacks, which typically use some form of malware, are aimed at a specific user or user group - customers of a bank - containing high levels of personal info gleaned from dossiers collated on social networking sites, press releases or company correspondence.

"[These] are difficult to protect against and have the potential to deliver the most negative impact to victims," said the report, adding that the value per victim is roughly 40 times higher than a mass security attack.

"Spearphishing attack campaigns are limited in volume but offer higher user open and click through rates. With these constraints, cybercriminals are increasingly focusing on business users with access to corporate banking accounts to make sure they're seeing a sufficient return per infection." it added.

The cost to organisations not limited to financials or remediation of injected hosts but to the brand reputation of the victim.

"With the number of targeted attacks expected to increase cybercriminal activity will continue to evolve, as will its impact," the report concluded. ®

Next gen security for virtualised datacentres

More from The Register

next story
Microsoft: We plan to CLEAN UP this here Windows Store town
Paid-for apps that provide free downloads? Really
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Hear ye, young cyber warriors of the realm: GCHQ wants you
Get involved, get a job and then never discuss work ever again
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.