sb-nz logo
Story image

Proofpoint unveils the biggest cyber threat hotspots from Q4 2016

10 Feb 2017

Proofpoint has released its Quarterly Threat Summary looking back at 2016, and it’s a case of more sophisticated evolution, more email malware, more social engineering, more BEC scams and more of a market for cyber exploit kits.

Q4 saw the biggest malicious email campaign yet, which was 6.7 times bigger than those seen in Q3.  Both campaigns used zipped JavaScript attachments to distribute the notorious Locky, which Proofpoint says explains the increase in Locky campaign volumes.

Business Email Compromise (BEC) scams were also on the rise, but CEO-CFO spoofing dropped 28%, down from its 39% high in Q3.

Social media phishing attacks have jumped by 500% in 2016 alone. Angler phishing was a popular method, which intercepts customer support channels on social media.

Fraudulent accounts on social channels also jumped by 100% between Q3 and Q4 alone, which Proofpoint says may be indicative of use in phishing, social spam and malware distribution and other attacks.

Mobile devices were not shielded from malware, as hundreds of thousands were exposed to malvertising, ad redirection and potential attack vectors through DNSChanger EK, which used SOHO router exploits that exposed all connected devices via DNS redirection.

More than 4500 mobile apps that tied themselves to the Summer Olympics and associated sponsor brands were also malicious. Proofpoint says that popular events and culture are common targets for risky apps.

Proofpoint’s top tips for organisations:

  • Assume users will click on links: Social engineering is popular, effective and rapidly evolving. Use a solution that identifies and quarantines inbound threats that target employees and outbound email threats that target customers.
  • Protect your brand reputation and customers: Look out for attacks – especially from fraudulent piggyback accounts - that target your customers over social media, email and mobile. Use a social media solution that can scan and report fraudulent activity.
  • Keep your mobile app environments secure: Mobile environments increase the risk of unauthorised apps that can steal critical information. Use a data-driven solution that works with mobile device management to show app behaviour and the data they are accessing.
  • Partner with a threat intelligence vendor: As attacks are getting more targeted, partnering with a vendor gives organisations a solution that combines static and dynamic techniques to protect and learn from threats.
Story image
Microsoft is most imitated brand for phishing attacks in Q3
Popular phishing tactics using the Microsoft brand used email campaigns to steal credentials of Microsoft accounts, luring victims to click on malicious links which redirect them to a fraudulent Microsoft login page. More
Story image
Insider threat report reveals deception in the workforce
Insider threats come from people inside an enterprise, whether they divulge proprietary information with nefarious intentions, or are just careless employees that unwittingly share sensitive data, writes Bitglass product marketing manager Juan Lugo.More
Story image
Palo Alto Networks launches new SD-WAN solutions and enhancements
Palo Alto Networks has introduced two new SD-WAN appliances and enhancements to its next-generation SD-WAN solution, expanding the company’s CloudGenix SD-WAN solutions reach.More
Story image
Secureworks: Remote working exposes new security vulnerabilities
New vulnerabilities have been exposed as IT teams across the world respond to the ongoing COVID-19 pandemic.More
Story image
Gartner reveals the top strategic tech trends for 2021
“CIOs are striving to adapt to changing conditions to compose the future business - this requires the organisational plasticity to form and reform dynamically. Gartner’s top strategic technology trends for 2021 enable that plasticity.”More
Story image
Entrust launches cloud-based ID issuance solution
The Sigma instant ID solution uses encryption, trusted HSM technology and secure boot to issue highly secure physical and mobile identities.More