Targeted Attacks and Malware Set to be Biggest Cyber Threats of 2015

Jan. 8, 2015 - PRLog -- Dubai, United Arab Emirates - 2014 was a big year for the cyber security industry with shocking revelations emerging of data breaches of immense scale conducted against some of the largest and most prestigious global organizations. At the start of the year, ESET, the global leader in proactive digital protection, correctly laid emphasis on internet privacy, new assaults on the Android operating system and the new wave of high-tech malware in its predictions for the main threats that business and home users would face. Based on extensive research conducted through 2014 and the analysis of global and regional cyber trends, the company has now put together its predictions for the top IT security trends that will dominate headlines in 2015.

Targeted attacks

If there is one lesson IT security researchers have learned in recent years, it is that targeted attacks are an increasing trend. And 2015 won’t be an exception. Most commonly known as Advanced Persistent Threats (APTs), their main differences with traditional cyber-attacks are target selection, duration of attack and stealth. In most of these attacks, there is a specific target, as opposed to traditional attacks that use any available corporate targets for their purposes. Secondly, these kinds of attacks try to stay unnoticed for longer periods of time. In this context, it is important to notice that the attack vectors are predominantly Social Engineering Attacks or zero-day exploits.

According to APTnotes (https://github.com/kbandla/APTnotes) repository- a site that collects APT attacks from various publicly-available documents and notes, sorted by year- these kinds of attacks have grown over the past several years from 3 identified attacks in 2008 to 75 known attacks in 2014 and probably many others as yet undiscovered. These stats are based only on well-known public attacks, so it is reasonable to think that the statistics showing a growing trend is real; the amount, however, should be bigger, taking into account attacks that never reach the public space because of confidentiality reasons.

Ransomware and malware

Ransomware will be a key point for malware developers and it will be a more relevant threat in the following years. During 2014, we saw big companies like Yahoo, Match or AOL (http://www.welivesecurity.com/2014/10/23/yahoo-match-aol-...) get hit by ransomware and ESET researchers also published Android/Simplocker analysis (http://www.welivesecurity.com/2014/06/04/simplocker/), the first Android File-Encrypting TOR-enabled Ransomware. In December of 2014, in a panel discussion at Georgetown Law’s called “Cybercrime 2020: The Future of Online Crime and Investigations” it was mentioned that “ransomware is the future of consumer cybercrime (http://threatpost.com/ransomware-is-the-future-of-consumer-cybercrime/109724)”.

Payment systems in the spotlight

In parallel with the growing use of online payment systems, the cybercrime interest on attacking them grows too. At this point, it is already obvious that cybercriminals will continue putting efforts into payment systems the more money circulates on the web. On the other hand, point of sale systems are still a current technology and malware authors are well aware of that. In mid-2014 ESET published a blog post on We Live Security about the worm Win32/BrutPOS that tries to brute-force its way into PoS machines (http://www.welivesecurity.com/2014/07/22/point-sale-machine-protected-attacks/) by trying a variety of (overused) passwords in order to log in via Remote Desktop Protocol (RDP).

There are other malware families for POS like JacksPos or Dexter, which could be the responsible ones for big attacks on Target wherein 40 million cards' data was stolen or Home Depot where 56 million cards were leaked after more than 5 months of the attack that started in April and was not discovered until almost September, when the company announces the leak.

It is interesting to note that since the BlackPOS source code was leaked in 2012, it will probably facilitate the creation of new variants of this threat that will increase over the next few years.

Internet of Things: Attacks on Things

There is no reason to think that new devices that are going to be connected to the Internet, storing more data on them and being useful for users, are not going to be a target for cybercrime. The Internet of Things trend will surely create an interest for cyber criminals. During this year we have seen some evidence of this emerging trend, like attacks on cars shown at Defcon (https://media.defcon.org/DEF%20CON%2021/DEF%20CON%2021%20presentations/Albert%20Garcia%20Illera%20and%20Javier%20Vazquez%20Vidal-Updated/DEFCON-21-Illera-Vidal-Dude-WTF-in-My-Car-Updated.pdf) conference using ECU (https://en.wikipedia.org/wiki/Electronic_control_unit) devices or the Tesla car that was hacked to open doors while in motion (http://www.welivesecurity.com/2014/07/23/tesla-model-s-hacked-open-doors-motion/), as discovered by Nitesh Dhanjani. Attacks and proofs of concept were shown on several SMART TVs, Boxee TV devices, biometric systems on smartphones, routers and also on Google glasses (http://www.welivesecurity.com/2014/03/19/google-glass-spyware-concept-lets-snoopers-see-through-wearers-eyes/)!

It should be noted though that the internet of things is an emerging space for cyber crime so it will take a few more years until it is in common use. Nevertheless, this will be a trend not for its quantity but for its uniqueness and innovation.

These are only the most important things that ESET has identified as big trends for 2015 regarding malware and cyber-attacks. Of course there are other current trends like mobile attacks that will remain on the rise and much more information to be shared. Knowing what to expect can help organizations and users be more aware and thus better protected.

About ESET

Since 1987, ESET® (http://www.eset.com/) has been developing record award-winning (https://www.virusbtn.com/vb100/archive/vendor?id=14-title=Virus) security software that now helps over 100 million users to Enjoy Safer Technology. Its broad security product portfolio covers all popular platforms and provides businesses and consumers around the world with the perfect balance of performance and proactive protection. The company has a global sales network covering 180 countries, and regional offices in Bratislava, San Diego, Singapore and Buenos Aires. For more information visit www.eset.com (http://www.eset.com/about) or follow us on LinkedIn (https://www.linkedin.com/company/28967?trk=tyah&trkInfo=tarId%3A1402921556545%2Ctas%3AESET%2Cidx%3A2-1-4), Facebook (https://www.facebook.com/eset?ref=br_tf) and Twitter (https://twitter.com/ESET).

The Company has global headquarters in Bratislava (Slovakia), with regional distribution centers in San Diego (U.S.), Buenos Aires (Argentina), and Singapore. ESET has malware research centers in Bratislava, San Diego, Buenos Aires, Singapore, Prague, Košice (Slovakia), Krakow (Poland), Montreal (Canada), Moscow (Russia). ESET Middle East has its regional office in Dubai Internet City and manages an extensive partner network in 11 countries: United Arab Emirates, Saudi Arabia, Kuwait, Qatar, Oman, Bahrain, Yemen, Lebanon, Jordan Egypt and Libya. More information is available via www.eset.com/me