Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity
    • IT Management
    • Networking

    Report Cites Increase in Phishing Attacks, New Techniques

    By
    Brian Prince
    -
    September 28, 2007
    Share
    Facebook
    Twitter
    Linkedin

      A new report by Web and messaging security provider MessageLabs sees an increase in phishing and targeted attacks at executives as fixtures on todays online threat landscape.

      The September 2007 MessageLabs Intelligence report states that one in every 87.2 e-mails is a phishing attack. The figure represents a slight increase over what was previously the highest level ever recorded by U.K.-based MessageLabs—one in every 93.3 emails—back in January.

      When judged as a proportion of all e-mail-borne threats such as viruses and Trojans, the number of phishing e-mails accounts for 56 percent of all malware threats intercepted in September, the report reads.

      The researchers attributed the growth in phishing attacks to more aggressive phishing techniques as well as the spread of phishing kits. One such kit popularized the “rock phishing” technique first seen in November 2005.

      “Although [the rock phishing] kit has not been widely distributed beyond a few select criminal enterprises, other similar tool kits are more readily available on the black market and enable non-technical criminals to conduct more sophisticated attacks more easily,” according to the report.

      Click here to read about a security researcher who went undercover to scam the phishers.

      “These techniques allow for each compromised computer within a botnet to host multiple phishing sites at the same time, and coupled with the use of fast-flux DNS techniques enable these sites to be replicated across the whole botnet, making them more difficult to shut down.”

      In addition, the study contained some bad news for C-level executives. On Sept.12, more than 1,100 C-level and senior management executives became the target of an attack researchers believe originated from the same perpetrators as an e-mail assault on June 26. The e-mails, which purport to be from a recruitment company, use a Microsoft error message to persuade the victims to click on the RFT attachment. The attachment contains an executable that drops two files onto the computer, which in turn will be used to pass sensitive information back to the attacker.

      “Two years ago the number of such attacks accounted for one to two incidents per week,” said Paul Wood, a senior analyst at MessageLabs. “One year ago this rose to one to two per day. This year it has risen to around seven to 10 per day.”

      The reason, Wood opined, is the increased availability of tool kits to assist in the creation of these attacks and the availability of malware service providers. While in the past the targets of such attacks were typically large, multinational organizations, todays victims include smaller businesses, he said.

      “The sharp upward curve we have seen in targeted attacks post June 26 is indicative of more criminal gangs moving into the area of intellectual property theft and is striking growth by any one measure,” Wood explained.

      Check out eWEEK.coms Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEKs Security Watch blog.

      Brian Prince

      MOST POPULAR ARTICLES

      Big Data and Analytics

      Alteryx’s Suresh Vittal on the Democratization of...

      James Maguire - May 31, 2022 0
      I spoke with Suresh Vittal, Chief Product Officer at Alteryx, about the industry mega-shift toward making data analytics tools accessible to a company’s complete...
      Read more
      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×