Posts Tagged ‘Hackers’

Stealth Cyber Attacks on SMBs are Increasingly Attractive to Hackers

by FireHost Evangelist on October 30th, 2009

steathattackMcAfee’s study, “The Security Paradox” examines how small and medium organizations that employ between 51-1,000 workers address IT security and growing cyber threats.

An overarching theme of the report reveals that SMBs around the world (and particularly in North America) believe they are too small and pose too little value to hackers to be worth their time, but recent trends in hacker and cybercrime activity reveal that’s just not the case.

In reality, SMBs’ limited resources, inadequate security, and lack of technical expertise make them more vulnerable to cyber attack, and hackers are taking notice.

Jeff Green, Senior VP of McAfee Avert Labs confirmed, “High profile attacks [on larger enterprises] are becoming less frequent because they are often detected quickly. Attackers are favoring stealth attacks that quietly infiltrate systems [of small and medium businesses].”

To change this trend, small and medium-sized organizations will need to make significant shifts in their fundamental values and budgetary allocations.

(more…)

SQL Injection Vulnerability Exposes Sensitive Details about Ride Share Users in S. California

by FireHost Evangelist on September 15th, 2009

rideshareFinalProgramming errors on RideMatch.info allow hackers to access names, home addresses, phone numbers, commuting schedules, and employee ID numbers for the service’s users according to an article featured in The Register.

The RideMatch.info flaw provides inadequate scrutiny of user-generated text entered in search boxes and fields throughout the website. Hackers exploit the SQL injection vulnerability by passing commands directly into the back end database.

The vulnerability was identified and reported in August by Kristian Hermansen, a security researcher who was required by his employer to sign up for the service. His report to The Register stated, “The reason I am bringing this to your attention is that the issue is not being fixed by the admins and most companies don’t even know that their employee’s personal and corporate information may be been compromised.”

To date, the exploit has exposed hundreds of employees’ sensitive information across several organizations in S. California, including at least one military entity.

(more…)

Online Payment Institutions, the New Phishing Target

by FireHost Evangelist on September 1st, 2009

onlinePhishingOverall, phishing attempts are down in the first half of 2009 as reported by IBM’s X-Force Team in the 2009 Mid-Year Trend & Risk Report.

The decrease is fueled by a decline in the number of traditional banks. Researchers speculate  that this trend could be fueled by the financial crisis, or perhaps improved security measures when users login to “real” banks online is playing a role. Make no mistake however, hackers aren’t slowing down. They seem instead to be targeting Online Payment institutions instead as reflected in the rise of attacks over the last 18 months.

Phishing Targets by Industry

To further reinforce the movement toward Online Payment institutions, PayPal is mentioned in two of the top five subject lines from this year. (PayPal is included four times if you extend the list to the top ten slots.)

(more…)

Summer 2009 Review: Top 100 Dirtiest Websites

by FireHost Evangelist on August 25th, 2009

dirtySitesIn a press release last week, Symantec revealed the top 100 dirtiest websites, but less than half of them (48%) were dirty in the way you’re thinking. The majority of the list’s subject matter features less scandalous content like catering, figure skating, legal services, and buying electronics.

Websites that made the list represent the “worst of the worst” based on the number of threats detected by Norton Safe Web. Without downloading or clicking on anything in particular, you risk exposing your computer to infection and revealing your personal and financial information into the hands of cyber criminals. Simply visiting one of these websites could infect your computer, so we don’t recommend you actually visit any of the websites that made the list.

So what makes these websites so dirty? Malware, security risks like phishing, and browser exploits top the list. In fact, the average number of threats found on the top dirtiest sites is… (ready for this?) 18,000, and 40 of the top 100 dirtiest websites have more than 20,000 unique threats each lurking in the shadows waiting to exploit unknowing visitors.

(more…)

US Based SMBs Targeted by Hackers More Often than International Firms

by FireHost Evangelist on August 7th, 2009

usSmbs_targetedPanda Security‘s most recent report indicates that thirty percent of small and medium size businesses worldwide have been infected with malware, and businesses based in the US are even more susceptible. Close to half (44%) of US based SMBs have lost time and productivity due to some form of cybercrime.

A lack of threat awareness is not the problem. The study shows that almost all businesses in this category have installed anti-virus programs and kept security systems up to date, but a large number of SMBs still become victims of cyber crimes. When disaster strikes, viruses (41%) followed by spyware (26%) are most often the cause.

In a conversation with SC Magazine, Luis Corrons, PandaLabs technical director suggested, “these companies often lack the in-house staff and resources to fight off increasingly sophisticated and exponentially more targeted Internet attacks.” (more…)