Menu
Hackers attack enterprise every 1.5 seconds: FireEye

Hackers attack enterprise every 1.5 seconds: FireEye

In the first half of 2013, Java was the most common zero-day focus for attackers

Malware activity has become so pervasive globally that attack servers communicating with Malware are now hosted in 206 countries and territories.

That’s according to the latest FireEye Advanced Threat Report which details malicious activities captured by the FireEye Security Platform through 2013.

The report draws on data gathered from nearly 40,000 unique cyber attacks (more than 100 per day) and over 22 million malware command and control (CnC) communications.

It provides a global picture of cyber attacks that routinely bypass traditional defenses such as firewalls, next-generation firewalls, IPS, antivirus and security gateways.

It found enterprises are attacked on average once every 1.5 seconds, compared to 2012, when malware attacks occurred once every three seconds. The increased frequency of use highlights the bigger role malware is playing in cyber attacks.

Malware attack servers, command and control (CnC) infrastructure are now in 206 countries and territories, up from 184 in 2012.

The U.S., Germany, South Korea, China, Netherlands, United Kingdom, and Russia were home to the most CnC servers.

The top ten countries that were most frequently targeted by APTs in 2013 in order of highest to lowest frequency were the US, South Korea, Canada, Japan, United Kingdom, Germany, Switzerland, Taiwan, Saudi Arabia and Israel.

The top ten verticals targeted by the highest number of unique malware families were government, services/consulting, technology, financial services, telecommunications, education, aerospace/defense, government (State/Local), chemicals and energy.

In the first half of 2013, Java was the most common zero-day focus for attackers.

In the second half of 2013, FireEye observed a burst of Internet Explorer (IE) zero-days used in "watering hole" attacks.

FireEye identified five times more web-based attacks than email-based attacks globally, and that per country, there were three times more web attacks than email attacks.

FireEye senior global threat analyst, Kenneth Geers, said the increasing frequency in occurrence of cyber attacks illustrated the allure of malware to those with malicious intentions.

"Across the board, we are seeing a global expansion of APTs, malware, CnC infrastructure, and the use of publically available tools to facilitate the attack process,” he said.

“The global scale of the threat has put cyber defenders in the very difficult position of not having any clue where the next attack will come from."

Follow Us

Join the ARN newsletter!

Error: Please check your email address.

Tags zero-day exploitsKenneth GeersjavaInternet ExplorermalwareFireEye senior global threat analyst

Upcoming

Slideshows

IN PICTURES: ARN Roundtable - Connected collaboration: the mobility story

IN PICTURES: ARN Roundtable - Connected collaboration: the mobility story

A select group of key players in the mobility space came together at Est. in Sydney to discuss the major trends, plays, problems and state of the mobility sector. A lively debate criss-crossed the mobility arena as attendees examined its potential. Photos by Editorial Director, Mike Gee

IN PICTURES: ARN Roundtable - Connected collaboration: the mobility story
IN PICTURES: Huawei Australia Roadshow 2015 - Sydney (+32 Pictures)

IN PICTURES: Huawei Australia Roadshow 2015 - Sydney (+32 Pictures)

Huawei Australia held its annual partner roadshow at Sydney's famous Randwick Racecourse. Partners, customers and analysts were all invited to hear from Huawei's experts on the state of the telecommunications industry, its work in the channel, and the future of software-defined, Cloud and 5G Networks. Photos by Allan Swann

IN PICTURES: Huawei Australia Roadshow 2015 - Sydney (+32 Pictures)

iasset.com is a channel management ecosystem that automates all major aspects of the entire sales, marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.

Show Comments