Targeted attacks rise, retail sector under siege

These attacks are typically aimed at corporative executives, to fool them into opening malicious attachments or links so the perpetrators can take control of desktop computers.

Targeted attacks via fraudulent and dangerous e-mail are on the rise, according to a Symantec report published today. These attacks are typically aimed at corporative executives, to fool them into opening malicious attachments or links so the perpetrators can take control of desktop computers.

Spam nation: U.S. tops list of spam-producing countries

In the September/October timeframe, 77 targeted attacks per day were intercepted, compared to 60 per day in the prior month, according to the Symantec October 2010 MessageLabs Intelligence Report, which is based on Symantec's e-mail filtering and analysis. For the first time, the retail sector is the hardest hit industry, rising from fewer than 0.5 per cent of all attacks over the past two years to about 25 per cent in the past month.

"The targets are widening from large international organizations to small- to mid-sized businesses," says Paul Wood, senior analyst within Symantec's MessageLabs Intelligence division. "The spike that stood out is in the retail sector, where we haven't seen that before." Targeted attacks have been far more common against the public sector and the pharmaceutical industry, for instance, he notes.

Worst moments in network security history

Wood compares targeted attacks to "sniper warfare." Attackers send legitimate-looking e-mail that appears to be from the human resources or IT staff, for example, to go after what the attackers hope are high-value targets.

In many cases, the goal may be to gain intelligence about company operations. The latest round in particular seems to be "a competitive type of attack" to gain information that could be of use to a competitor, says Wood, who speculates that "it's an industrial espionage sort of thing."

Unlike broader blasts of spam that can also contain dangerous attachments and links, targeted e-mail attacks are far smaller in volume.  In the past month, the targeted e-mail attacks that Symantec detected and blocked were aimed at 286 organizations in total, went after six retail companies, and included 516 separate spear phishing attacks that appear to have originated from IP addresses in the U.S. and Argentina.

Two retail organizations in particular were the target of 63 per cent of these 516 attacks. When the first round of attack e-mail was blocked, second and third rounds kept coming. In one case the attack spoofed an organization's senior IT security executive to target 70 employees by fraudulently requesting action with a "critical update" that was actually a malicious attachment. If a recipient had clicked on it, a backdoor Trojan would have been installed on the machine, giving the attacker access to it, Symantec says.

Read more about wide area network in Network World's Wide Area Network section.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags intelsymantecantispammessagelabsanti-malwaretargeted attacks; spam; Messagelabs

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ellen Messmer

Network World
Show Comments

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?