Advertisement
Promo

Security threats Toolkit

Symantec: Phishers targeting social-networking sites

Darren Osborne and Alex Serpo ZDNet Australia

Published: 09 Apr 2008 08:12 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Social-networking websites are fast becoming a key target for online fraud, according to Symantec's latest Internet Security Threat Report.

The report reveals that, for the second half of 2007, there were 87,963 "phishing hosts", an increase of 167 percent from the first half of 2007. The report states that "66 percent of phishing attacks in the US were directed towards social-networking sites".

Symantec Australia managing director Craig Scroggie said social-networking sites are a treasure trove of personal data, listing information such as birthdays, location and employment history.

"[Users of these] websites are putting up a large amount of confidential information that is being used for fraudulent activity and financial gain," Scroggie said. The Symantec report notes that social-networking sites are attractive to cybercriminals because such pages "are generally trusted by users".

Personal information is collected and sold on the internet black market, for as little as $1 (51 pence). "We're starting to see the area mature significantly," Scroggie said.

The report also notes that vulnerabilities in websites are increasingly popular malware vectors as they allow for more sophisticated and multi-stage attacks.

Read this

Feature
Special report: The top five internal security threats

What should an employer watch out for?

Read more +

Scroggie added that some people used the proceeds of these sales to fund further attacks. "People are employing programmers dedicated to the production of those threats," Scroggie said.

While the report found that most attacks continue to occur and originate in the US, China is becoming increasingly important as a source of malicious code.

"Russia was implicated in the widespread distribution of malicious code over the last couple of years. That dropped off in 2007," Scroggie said, "but [security threats] have recently re-emerged in China."

Scroggie said the spread of malicious code was expected to increase, with the growing use of portable data-storage devices. "There is an increased security threat from portable media devices, whether it be a USB flash drive or an MP3 player," he said.

Credit: Phishers seek friends on fake Facebook from ZDNet Australia

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
1 out of 1 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:






Video icon

Video

Sentry Posts Blog

Symantec website breached

Security company Symantec has said that one of its websites was successfully breached. Romanian security researcher 'Unu' posted details of the breach in a blog post on Monday. Unu... More

Post a comment

Campaigners criticise '£10bn NHS IT ov...

The National Health Service's flagship IT project has been criticised by a tax campaign group for running billions of pounds over budget. The NHS National Programme for IT (NPfIT)... More

2 comments

Climate research centre compromised

One of the UK's leading climate change research centres has had a security breach. The Climate Research Unit at the University of East Anglia (UEA) suffered a compromise of information,... More

1 comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters