Targeted attacks rise, retail sector under siege

By , Network World |  Security, retail, Symantec

Targeted attacks via fraudulent and dangerous e-mail are on the rise, according to a Symantec report published today. These attacks are typically aimed at corporative executives, to fool them into opening malicious attachments or links so the perpetrators can take control of desktop computers.

Spam nation: U.S. tops list of spam-producing countries

In the September/October timeframe, 77 targeted attacks per day were intercepted, compared to 60 per day in the prior month, according to the Symantec October 2010 MessageLabs Intelligence Report, which is based on Symantec's e-mail filtering and analysis. For the first time, the retail sector is the hardest hit industry, rising from fewer than .5% of all attacks over the past two years to about 25% in the past month.

"The targets are widening from large international organizations to small- to mid-sized businesses," says Paul Wood, senior analyst within Symantec's MessageLabs Intelligence division. "The spike that stood out is in the retail sector, where we haven't seen that before." Targeted attacks have been far more common against the public sector and the pharmaceutical industry, for instance, he notes.

Worst moments in network security history

Wood compares targeted attacks to "sniper warfare." Attackers send legitimate-looking e-mail that appears to be from the human resources or IT staff, for example, to go after what the attackers hope are high-value targets.

In many cases, the goal may be to gain intelligence about company operations. The latest round in particular seems to be "a competitive type of attack" to gain information that could be of use to a competitor, says Wood, who speculates that "it's an industrial espionage sort of thing."

Unlike broader blasts of spam that can also contain dangerous attachments and links, targeted e-mail attacks are far smaller in volume.  In the past month, the targeted e-mail attacks that Symantec detected and blocked were aimed at 286 organizations in total, went after six retail companies, and included 516 separate spear phishing attacks that appear to have originated from IP addresses in the U.S. and Argentina.


Originally published on Network World |  Click here to read the original story.
Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

SecurityWhite Papers & Webcasts

See more White Papers | Webcasts

Answers - Powered by ITworld

ITworld Answers helps you solve problems and share expertise. Ask a question or take a crack at answering the new questions below.

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Ask a Question
randomness