Targeted attacks rise, retail sector under siege

These attacks are typically aimed at corporative executives, to fool them into opening malicious attachments or links so the perpetrators can take control of desktop computers.

Targeted attacks via fraudulent and dangerous e-mail are on the rise, according to a Symantec report published today. These attacks are typically aimed at corporative executives, to fool them into opening malicious attachments or links so the perpetrators can take control of desktop computers.

Spam nation: U.S. tops list of spam-producing countries

In the September/October timeframe, 77 targeted attacks per day were intercepted, compared to 60 per day in the prior month, according to the Symantec October 2010 MessageLabs Intelligence Report, which is based on Symantec's e-mail filtering and analysis. For the first time, the retail sector is the hardest hit industry, rising from fewer than 0.5 per cent of all attacks over the past two years to about 25 per cent in the past month.

"The targets are widening from large international organizations to small- to mid-sized businesses," says Paul Wood, senior analyst within Symantec's MessageLabs Intelligence division. "The spike that stood out is in the retail sector, where we haven't seen that before." Targeted attacks have been far more common against the public sector and the pharmaceutical industry, for instance, he notes.

Worst moments in network security history

Wood compares targeted attacks to "sniper warfare." Attackers send legitimate-looking e-mail that appears to be from the human resources or IT staff, for example, to go after what the attackers hope are high-value targets.

In many cases, the goal may be to gain intelligence about company operations. The latest round in particular seems to be "a competitive type of attack" to gain information that could be of use to a competitor, says Wood, who speculates that "it's an industrial espionage sort of thing."

Unlike broader blasts of spam that can also contain dangerous attachments and links, targeted e-mail attacks are far smaller in volume.  In the past month, the targeted e-mail attacks that Symantec detected and blocked were aimed at 286 organizations in total, went after six retail companies, and included 516 separate spear phishing attacks that appear to have originated from IP addresses in the U.S. and Argentina.

Two retail organizations in particular were the target of 63 per cent of these 516 attacks. When the first round of attack e-mail was blocked, second and third rounds kept coming. In one case the attack spoofed an organization's senior IT security executive to target 70 employees by fraudulently requesting action with a "critical update" that was actually a malicious attachment. If a recipient had clicked on it, a backdoor Trojan would have been installed on the machine, giving the attacker access to it, Symantec says.

Read more about wide area network in Network World's Wide Area Network section.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags targeted attacks; spam; Messagelabsantispammessagelabssymantecsecurityintelanti-malware

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ellen Messmer

Network World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?