Over 50% of Malware Are Phishing Attacks
More than half (55.59 per cent) of all malware sent on email is an attempted phishing attack, according to analysis of malware by researchers. Read the full article. [Help Net Security]
Malware
U.S. Congress Websites Defaced
A number of Congressional websites were defaced with abuse aimed at
President Obama following Wednesday’s State of the Union address. Read the full article. [The Register]
The 2010 Threat Landscape
Costin Raiu, chief security expert at Kaspersky Lab in Romania, discusses the state of the threat landscape for the year ahead, including botnets, malicious PDFs and targeted attacks.
A new report published today sheds light on the
steps ultra-sophisticated attackers take to gain a foothold inside
governments and company networks and remain entrenched in order to
steal intellectual property and other data. The bad news is these
attacks — including the recent ones on Google, Adobe, and other
companies — almost always are successful and undetectable until it’s
too late.
Read the full article [Darkreading.com].
A significant discovery in the recent Aurora attack that affected Google, Adobe, Yahoo and others is that the attackers had selected
employees at the companies with access to proprietary data, then learnt
who their friends were. The hackers compromised the social network
accounts of those friends, hoping to enhance the probability that their
final targets would click on the links they sent. Read the full article. [The Financial Times]
Scareware scammers are taking advantage of rumors about an “unnamed
app” that supposedly poses a security risk to Facebook users in order
to trick users into sites slinging rogue security software packages. Read the full article. [The Register]
The last quarter of 2009 saw an average of 13,400 attempts to hack
healthcare organizations, compared to an average of 6,500 in the first
nine months, say researchers. Read the full article. [Infosecurity]
A Nebraska man agreed today to plead guilty to participating in an
attack on Church of Scientology websites in January 2008 that shut down
the group’s websites. Read the full article. [Help Net Security]
A machine equipment company in Texas is tousling with its bank after
organized crooks swiped more than $800,000 in a 48-hour cyber heist
late last year. While many companies similarly victimized over the past
year have sued their banks for having inadequate security protection,
this case is unusual because the bank is preemptively suing the victim. Read the full article. [KrebsonSecurity]
A new iteration of Zeus, a notorious password-stealing trojan, is victimizing users of AOL Instant Messenger (AIM), according to researchers. Read the full article. [Secure Computing]
