Report: Credit Crunch Fuels Surge In Web Attacks

ScanSafe, a leading provider of SaaS Web Security, recently issued its Annual Global Threat Report.

The report is based on an analysis of more than 240 billion Web requests processed in 2008 by the ScanSafe Threat Center on behalf of the company’s corporate customers in more than 80 countries. It represents the world’s largest security analysis of real-time traffic.

The report reveals that there has been an explosive growth in malware throughout 2008. ScanSafe noted that there has been an overwhelming 582 percent growth between like quarters in 2007 and 2008 and a 300 percent volume ratio increase from January 2008 through December 2008. Exploits and iframes were up 1731 percent in 2008, while data-theft Trojans increased 1559 percent.

“We saw a continued acceleration of Web-delivered malware in 2008, reaching significant peaks in both October and November. The numbers are staggering,” said Mary Landesman, senior security researcher at ScanSafe. “There is a high correlation of increased online crime with the decline in the global economy. It could be that the increasing levels of job loss and uncertainty are fueling the surge in criminal activity. It is also likely that cyber crime is proving to be a viable business opportunity in a climate where legitimate opportunities are becoming increasingly more limited.”

Other key findings from the report include:

The Web is now a massive front for data harvesting.
Cyber criminals in 2008 have shown a change of intent and are now focused on the ongoing targeting and harvesting of sensitive data. Most of the malware delivered through the Web provides remote customization and configurability, enabling criminal attackers to target specific data and to remotely manage how that data is obtained. For home users, gaming credentials or credit card numbers could be at risk. For enterprises, there is the possibility of intellectual property theft and the potential to eavesdrop on all network transmissions via ARP poisoning or other man-in-the-middle attacks.

The credit crunch is fueling data theft.
In 2008, 14 percent of all ScanSafe Web malware blocks were the result of encounters with data theft Trojans, compared to 6 percent in 2007. Towards the end of the year (Q4) when the credit crunch was in full swing, we saw the largest growth in this category of threats. Not only did October and November 2008 show the highest levels of Web malware blocks but they also showed a heavy saturation of data theft Trojans.

Trusted sites pose the greatest risk.
In April 2008 ScanSafe counted an excess of 780,000 malicious Web pages from only five vertical interest sectors as a result of a single SQL injection attack. As a result of the continuing mass compromise of legitimate websites observed throughout 2008, the standard ‘safe surfing’ advice of avoiding unknown or non-trusted websites no longer applies. Today, it is the trusted sites that should be viewed as posing the greatest risk to Web surfers.

Energy and oil sector has 400 percent elevated exposure to data theft Trojans.
ScanSafe discovered that the top five most at risk verticals were energy and oil, pharmaceutical and chemical, engineering and construction, transportation and shipping, and the travel and entertainment industry. The average number of unique new variants of data theft Trojans encountered by customers in the first three quarters of 2008 was 57. The energy and oil sector encountered 213, an elevated exposure of nearly 400 percent. For those in the engineering and construction industry, the unique variant count was 166, nearly 300 percent greater than the average.

“Today’s malware is all about stealing and harvesting data. Cyber criminals have moved away from de-facing sites or merely designing malware as a prank and it is now created with commercial and criminal intent,” Landesman said. “Online crime has become a lucrative business and both commercial and personal data fetch a significant sum on black markets.”

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Digital Access in the Workplace

    It is simple to set up a unified, robust access control solution for one tenant leasing one building. It is even easier if the tenant owns the property. But what is involved when multiple companies lease space in a building? And what about companies that have multiple buildings in the same city or locations across various regions in the country and the world? Read Now

  • Cloud and Hybrid Adoption on the Rise

    The physical security industry is experiencing a time of great transformation. Cloud connectivity is accelerating, and more organizations are choosing to blend on-premises and cloud-based solutions. This transformation is affecting all aspects of security, including access control. In the Genetec annual State of Physical Security Survey, it was access control that topped the list of new technologies end-users planned to focus on in 2024. Read Now

  • Texas City Replaces Locks on Intelligent Traffic Cabinets With More Secure Option

    The Transportation Services and Mobility department for the city of Grand Prairie, Texas recently completed a substantial project to replace the locks on their Intelligent Traffic Cabinets with a better and more secure choice. Turns out what they needed was only a few miles away with ALCEA’s Traffic Cabinet Locking Solution powered by ABLOY technology. Read Now

Featured Cybersecurity

Webinars

New Products

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • Hanwha QNO-7012R

    Hanwha QNO-7012R

    The Q Series cameras are equipped with an Open Platform chipset for easy and seamless integration with third-party systems and solutions, and analog video output (CVBS) support for easy camera positioning during installation. A suite of on-board intelligent video analytics covers tampering, directional/virtual line detection, defocus detection, enter/exit, and motion detection. 3