Aggressive breed of phishing attacks underway: Trend Micro

Claims more than 90 per cent of targeted attacks derived from spear phishing emails

An aggressive breed of phishing attacks is well underway, with 91 per cent of targeted attacks derived from spear phishing emails, according to Trend Micro.

Its recent study, Spear Phishing Email: Most Favored APT Attack Bait, analysed targeted attack data collected between February and September this year.

According to Trend Micro, the finding reinforces its position that these attacks often begin at a very simple point of contact or an exploit-laden site, starting a compromise within the victim’s network. The report also found that 94 per cent of targeted emails use malicious file attachments as the payload or infection source. The remaining six per cent use alternative methods such as installing malware through malicious links that download malicious files. Trend Micro A/NZ senior threat researcher, Jon Oliver, said spear phishing is the first step in the most sophisticated forms of cyber-attack. “Phishing in general has become more sophisticated, with these email attacks significantly increasing in number and maliciousness in 2012. They are now more likely to induce users to click on links and open attachments,” he said.

Oliver added that organisations need to ensure their email infrastructure is as secure as possible, and should educate their users about what email is safe to click on and which attachments are safe to open.

Other findings from the study include:

  • The most commonly used and shared file types accounted for 70 per cent of the total number of spear phishing email attachments during the monitored time period. The main file types were: .RTF (38 per cent), .XLS (15 per cent), and .ZIP (13 per cent).
  • The most highly targeted industries are government and activist groups.
  • Three in four of the targeted victims email addresses are easily found through Web searches or using common email address formats.

FILL IN THE SURVEY - AND YOU COULD BE A WINNER: ARN wants to hear from YOU. Tell us how you run a successful business and you could win an adrenaline-fuelled adventure of your choice. COMPLETE THE ARN SURVEY.

Tags findingssecuritytrend microstudyphishing

Comments

Comments are now closed

 

Latest News

04:03PM
Telstra strikes Cloud deal with Telkom Indonesia
02:36PM
Brocade deploys router for new high-speed research network platform
12:43PM
EXCLUSIVE: Tonnex International falls into liquidation after lengthy court battl...
12:38PM
Samsung's 3G Gear S could pave the way for the smartphones of the future
More News
29 Aug
CA Expo ’14 Perth
08 Sep
ITIL Foundation (incl. Exam)
10 Sep
CPX 2014
10 Sep
IT Leaders Lunch
View all events