Online reputation issues stemming from computer crimes and cybercrime will be the main nightmare for Spanish companies in 2014.
Reviewing the past year, 2013, it must be noted that it was not without problems related to security incidents affecting companies and their executives; something that we at Onbranding have been pointing out for years: the importance of having a shielded online image and
Reports from companies such as McAfee, Norton, and Cisco highlight the increase in malware for mobile platforms. The target remains Android, due to the ease of programming malware. Application verification in iOS makes it difficult to program applications for that platform. On Windows Phone and Firefox OS, no samples affecting the latest versions have yet emerged.
Outdated software remains a primary issue regarding infection. Java, Adobe, and office suites continue to be the main players, where cybercriminals focus their efforts on finding flaws unknown to manufacturers (0-days).
Thus, 2013 was marked by:
-
A clear increase in cybercrime
50% of adults connected to the network have been victims of some form of cybercrime and/or incident in the last year, representing a cybercrime cost of over 82,000 million euros. These data place us at one victim every 12 seconds. Among these crimes, we find cyberbullying, fraud, scams, malware attacks, phishing, and the theft of social media accounts.
-
More mobility, less protection
There are more and more tablet and smartphone users, but they are not aware of the security of their devices. Practically 50% of users do not adopt basic security measures: the use of passwords, security software, or performing backups of device files.
-
Account theft, especially on Facebook
It is also alarming that 600,000 Facebook accounts are compromised every day. There is a clear and high upward trend in the theft of personal accounts in emails and social networks.
-
Proliferation of malware for Android
G Data Security Labs recorded nearly 520,000 new threats for Android in the first 6 months of 2013 alone. The majority, 86%, are Trojans. The combination of factors such as a lack of awareness and a lack of protection makes smartphones a chosen target for cybercriminals.
-
Fraud associated with sending SMS
When a bank account is breached where the second authentication factor is the mobile phone, and the phone is also compromised as the target of the attack, it is likely to be used for sending SMS messages. Apart from these services, we have premium SMS services to which users are subscribed and which regularly spend money by sending advertising. It should be noted that it is very difficult to unsubscribe from these services, requiring contact with the operator to block this type of fraud.
2014 Trends
-
Data theft on smartphones and the increase in botnets
Malicious applications (malware) will become increasingly complex to detect. Cybercriminals will learn to better camouflage malicious codes, and applications will remain on mobile devices for longer. Panda Security predicts a new record on mobile platforms, especially Android. Cybercriminals will focus on the theft of personal data and the formation of smartphone botnets.
-
Data theft and attacks in the cloud, entry and download of malware in the cloud
Web and storage services tend to stay in the cloud, due to savings in personnel and infrastructure, among other things. Cybercriminals are increasingly focusing their attacks and operations on this area.
Cloud services must also be protected, as the same security measures applied in controlled local network environments are sometimes overlooked. This year has seen an increase in what has been termed the private cloud.
-
Smart appliances
New home automation devices will attract criminals, as they make it possible to know when someone is at home. Thus, they can obtain useful information to know when and how to steal from someone’s home.
-
Malware lures with current events
By taking advantage of news, events, or other current affairs, cybercriminals will try to attract potential victims. For example, football fans looking for tickets, flights, or accommodation for the World Cup in Brazil.
-
Lack of Windows XP support
Support for Windows XP has an expiration date: April 8, 2014. Vulnerabilities will not be fixed, and systems will be exposed to attacks. According to NetMarketShare, in September 2013, Windows XP was still used on 31.42% of the world’s computers. According to Gartner, when April 8 arrives, it is estimated that more than 15% of SMEs will still have Windows XP on at least 10% of their computers. Hackers have a golden opportunity to sell their threats to the highest bidder, and individuals can spread massive infections.
Sources: Norton Report 2013, muyseguridad.net, Fortinet, Hispasec