According to a recent report, the second quarter of 2015 showed a increasing number of high-profile attacks where cybercriminals became more inventive when attacking existing technologies that are often overlooked.|According to a recent report, the second quarter of 2015 showed a increasing number of high-profile attacks where cybercriminals became more inventive when attacking existing technologies that are often overlooked.
The second quarter of 2015 was wrought with high profile vulnerabilities and hacks. Cybercriminals became more inventive in their attack methods to infiltrate and abuse existing technologies that are often overlooked. These developments are analysed in the recently released Trend Micro Q2 security roundup report, “A Rising Tide: New Hacks Threaten Public Technologies.” It details the evolution of tools and methods attackers use to get the greatest return on every cybercrime investment.
“In the second quarter, we saw a shift in the threat landscape with cyber criminals becoming more sophisticated and creative, amplifying existing methods of attack, and using them in new ways,” said Raimund Genes, CTO, Trend Micro. “The ethereal outlook on the threat of cybercrime can no longer be held by the general population. This quarter demonstrated that the potential damage caused by cyber-attacks extends far beyond a simple software bug to hacks of airplanes, smart cars and television stations.”
Hackers are taking more strategic approaches, refining their approach and targeting more selective victims to improve their infection rates. This is reflected by the exponential increase in the use of several traditional attack methods, including a 50 percent increase in the integration of the Angler exploit kit, a 67 percent growth in overall exploit kit-related threats, and CryptoWall ransomware becoming highly targeted, with 79 percent of infections occurring in the U.S.
Additionally, government entities have realized the full impact of cyberattacks during the second quarter with massive data breaches on both the Internal Revenue Service (IRS) in May and the U.S. Office of Personnel Management (OPM) system in June. The OPM data breach was the largest of its kind to date, exposing personally identifiable information of approximately 21 million individuals. Other government agencies were impacted by targeted campaigns using macro malware, new command and control (C&C) servers, and the continued use of newly exploited vulnerabilities and 0-days Pawn Storm.
When looking at the Q2 threat landscape as a whole, the U.S. is a major player in both deploying and receiving various attacks, with malicious links, spam, C&C servers and ransomware are all having a major presence.
Report highlights include:
Hacks causing disruptions to public utilities
Broadcast networks, airplanes, automated vehicular systems and home routers pose not only the risk of malware infections, but physical inconveniences and threats. Lone wolf cybercriminals gain notoriety via successful ransomware and PoS attacks, FighterPoS and MalumPoS deployed by solo hackers “Lordfenix” and “Frapstar,” along with Hawkeye keylogger attacks, demonstrated that single individuals are capable of making a significant impact in today’s threat marketplace.
Government entities fight back against cybercrime
Interpol, Europol, the Department of Homeland Security and the FBI all played a role in taking down longstanding botnet operations. Additionally, the indictment of Silk Road founder Ross Ulbricht brought to light the nebulous nature and dangers of the Dark Web.
National and political impacts were made by attacks on government organisations
The attack on OPM was a shocking realisation that no one’s personal data is safe. Macro malware, island-hopping and C&C servers were among the tactics used to target government data in this and similar breaches.
Public-facing websites and mobile devices were threatened in new ways
While threats to software are always present, vulnerabilities in Web apps were proven to be just as dangerous. Attackers will leverage any vulnerability available and custom applications need custom security attention to ensure those entry points are eliminated.
AppDate: A security boost for schools
In his latest app round-up, SEAN BACHER features Karri, ChatBack, Charge Running, Bookings Africa and HomeChoice.
With large amounts of cash and very little security, schools are now becoming an easy target for criminals. Numerous schools across the country have already been raided, with several serious incidents and even fatalities.
In partnership with Nedbank, Karri has introduced a mobile payment app to address this growing problem. The app enables parents to send money securely to their child’s school. Hundreds of schools countrywide are using Karri, with most now refusing to accept cash payments from parents.
The app offers a simple alternative to children bringing cash to school by allowing parents to make payments via an app on their smartphone. It is free for parents to use and there are no hidden costs or sign-up fees for the school.
Platform: Android and iOS
Expect to pay: A free download
Stockists: Visit Karri here for downloading instructions.
Visit the next page to read more about ChatBack, Charge Running, Bookings Africa and HomeChoice.
ParkUpp is here to sell your unused parking spot
Prop-tech startup ParkUpp is helping residents and property owners to make some extra cash from their unused parking. This is proving to be a winner for JanuWorry, the month that often brings financial stress post the December holidays for many individuals and businesses across South Africa.
ParkUpp already has over 4500 listings on its platform, predominantly in Johannesburg and Cape Town. They include The Union Castle building owned by Izandla Properties, Design Quarter on William Nicol Drive, along with other commercial and residential parking facilities.
The app has also been awarded some accolades from property industry incumbents such as the Women’s Property Network (WPN) for Young Achiever’s category and South African Institute of Black Property Professionals (SAIBPP) for Disruptor of the Year. Also headed to Silicon Valley for a two week bootcamp with Kingson Capital, a South African based Venture Capital firm.
This award winning platform not only creates extra income from empty parking spaces, it also decreases drivers’ anxiety of parking in unsafe space and also saves them a buck. In the Cape Town CBD, with over 45% cars parked on-street: paying an average of R18/hour, amounting to R2880 a month, ParkUpp users are able to save up to 50% by renting out a parking for R1500.
ParkUpp co-founder Michael Savvides says home owners or businesses often get frustrated when they find someone illegally parked in their bay. “Instead of being frustrated, list your parking during the times it is unused for people to park in your space legally. No one really wants to knock on someone’s door to ask for parking so our platform is removing that uncomfortable feeling.”
“We create trust between owners and drivers through our vetting processes. We save drivers 50% on parking costs and generate extra income for the owners and we also provide access to spaces that were previously inaccessible,” he explains.
“Our current focus is to increase occupancy rate for the listing parking bays, businesses and individuals who need parking can visit the platform to make a booking or suggest a location where you need parking,” he concludes.
As a driver, should you not find your preferred parking, email the team with suggested locations at email@example.com in order for them to find you safe, secure and affordable parking for you.