Menu
Cybercriminals use legitimate sites to launch attacks: Websense

Cybercriminals use legitimate sites to launch attacks: Websense

Report finds 85 per cent of malicious links in web or email attacks on legitimate websites

Cybercriminals are overwhelmingly using legitimate compromised websites to launch web or email attacks, according to the Websense Security Labs 2014 Threat report.

The report found 85 per cent of malicious links used in web or email attacks were located on compromised legitimate websites and details the growing global criminal-infrastructure-as-a-service economy through exploit kits and redirection chains.

Through an analysis of the latest attack methodology, Websense security researchers analyse the seven threat stages of advanced attacks. In addition, outcomes include the modification and repurposing of existing malware source code.

The report also found the average number of website redirects user per attack in 203 was four, while the maximum number of redirects used in a documented attack was 20.

Websites classified as business and economy, information technology, shopping and travel made the top ten list of compromised redirect destination categories.

The Magnitude and Neutrino exploit kits experienced the largest surge in adoption following the arrest of Blackhole’s creator, according to the report.

While 30 per cent of malicious executable files sampled included custom encryption of command and control communication or data exfiltration

Websense vice president of security research, Charles Renert, said cybercriminals continued to evolve their attack planning and execution to stay ahead of most existing security measures.

“While the determined, persistent attackers continue to have success in advanced, strategic attacks using zero-day exploits and advanced malware, there has also been a boom in cyber criminal activity on a massive scale,” he said.

“Even these more ‘common’ forms of attack are easily slipping past organisations without real-time defenses.”

The report also documents how the infrastructure of an attack campaign is constantly developed, enhanced and reused throughout the entire threat life cycle.

To avoid detection when reusing components in subsequent attacks, criminals are increasingly taking an approach that involves modification and modulation of existing attack tools.

Often, this means choosing to take advantage of a specific strength of a particular piece of malware to target new industries.

Websense security researchers observed the Zeus malware, which was originally designed as a financial threat and keylogging Trojan, dramatically increased in use as it was repurposed for other vertical markets.

According to the report, in the past year, the government and communications industries joined financial firms among the top five verticals targeted with Zeus malware.

The top two industries hit hardest with Zeus attacks were the services and manufacturing sectors.


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags zero-day exploitsWebsense vice president of security researchZeus malwareMagnitude and Neutrino Exploit KitsBlackholeCharles RenertWebsense Security Labs 2014 Threat report

Featured

Slideshows

Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Veritas honours top performing trans-Tasman partners

Veritas honours top performing trans-Tasman partners

Veritas honoured its top performing partners across the channel in Australia and New Zealand, recognising innovation and excellence on both sides of the Tasman. Revealed under the Vivid lights in Sydney, Intalock claimed the coveted Partner of the Year 2017 (Pacific) award, with Data#3 acknowledged for 12 months of strong growth across the market. Meanwhile, Datacom took home the New Zealand honours, with Global Storage and Insentra winning service provider and consulting awards respectively. Dicker Data was recognised as the standout distributor of the year, while Hitachi Data Systems claimed the alliance partner award. Photos by Bob Seary.

Veritas honours top performing trans-Tasman partners
Show Comments