Latest news

Among the examples of these increasingly focused attacks were the 142 million threats which were blocked from infecting small businesses as of the second quarter of 2012, an increase of 27% quarter on quarter.
Trend Micro also found increasingly sophisticated attacks against individuals in the form of ATS attacks. Large organizations weren't exempt either: the IXSHE campaign showed cybercriminals stepping up their tactics to gain access to large multinational corporations without notice.
In addition to these more targeted attacks, cybercriminals are continuing to cast their net widely in large-scale attacks using newer, more lethal methods. Police Trojan Attacks and the Black Hole Exploit Kit continue to target desktop systems while newer platforms such as Android are seeing an unprecedented explosion in malicious apps. Social media wasn't exempt as cybercriminals jumped on the Pinterest bandwagon bringing tried-and-true scams to the latest social networking craze.
Across the board though, the goal is the same: to get personal data and financial information.
"The reason why criminals are focusing their attacks on stealing personal data is simple. It's the sheer volume of people working from multiple devices that leaves them vulnerable to attacks," said Rik Ferguson, director of security research and communication, Trend Micro. "While Trend Micro has been integral in working with authorities to break up a number of cybercriminal rings over the last year, these cybercriminals have acquired new techniques and tools from collaborating with one another to accelerate their 'industry.' The fact is: business is booming for cybercrime and everyone needs to take notice."
Notable trends in Q2 2012:
- 25,000 Android malware apps have been identified as of the second quarter of 2012, an increase of 317% over the number of samples found in the first quarter of 2012, which is compounded against the fact that Trend Micro has seen only 1 in 5 Android devices with a security app installed
- Ransomware attacks that track a victim's geographic location, holds the system captive and scares the victim into revealing personal information by using the victim's local police force as a threat
- More sophisticated attack tools, like the automatic transfer systems, allow criminals to steal banking information when they are not online
- Organization of tried-and-true attack methods, such as the Blackhole Exploit Kit, offers technical support for criminals looking to collect personal financial information
- The IXESHE malware targeted enterprises primarily in East Asia, with the number of C&C servers in Taiwan equaling those located in the U.S.
- Pinterest has become the social media platform of choice among criminals; the top 5 social engineering lures being used across all social networking sites are: Diablo 3, Instagram Android, Angry Birds Space, London 2012 Olympics and Tibet.


Spotlight

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware
Posted on 20 May 2013. | A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.

Ransomware adds password stealing to its arsenal
Posted on 17 May 2013. | Microsoft researchers are warning about a new variant of the well-known Reveton ransomware doing rounds.

IT security jobs: What's in demand and how to meet it
Posted on 15 May 2013. | Let's say you want a career in information security, where do you start? What credentials do you need? What are employers looking for? Read on to find some answers.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.






