Small Businesses Under Increasing Threat From Web Attacks: Symantec
Web-based attacks increased by 30 percent in 2012, many of which originated from the compromised Websites of small businesses.Targeted attacks are growing the most among businesses with fewer than 250 employees, as small businesses are now the target of 31 percent of all attacks, a threefold increase from 2011, according to IT security specialist Symantec's Internet Security Threat Report (ISTR), Volume 18. Web-based attacks increased by 30 percent in 2012, many of which originated from the compromised Websites of small businesses. Attackers hone in on small businesses that may often lack adequate security practices and infrastructure, and they are further enticed by these organizations' bank account information, customer data and intellectual property, the report said. The ISTR study revealed a 42 percent surge during 2012 in targeted attacks compared with the prior year, and indicated consumers remain vulnerable to ransomware and mobile threats, particularly on Google's Android mobile operating platform. Android's market share, its open platform and the multiple distribution methods available to distribute malicious apps make it what Symantec called the "go-to platform" for attackers. Last year, mobile malware increased by 58 percent, and 32 percent of all mobile threats attempted to steal information, such as email addresses and phone numbers. While Apple's iOS had the most documented vulnerabilities, it only had one threat discovered during the same period. Android, by contrast, had fewer vulnerabilities but more threats than any other mobile operating system.
Designed to steal intellectual property, these types of targeted cyber-espionage attacks are increasingly hitting the manufacturing sector as well as small businesses. By going after manufacturing companies in the supply chain, attackers gain access to sensitive information of a larger company, the study noted. In addition, executives are no longer the leading targets of choice. In 2012, the most commonly targeted victims of these types of attacks across all industries were knowledge workers (27 percent) with access to intellectual property as well as those in sales (24 percent).