August 27, 2015
In Canada, security software vendor Trend Micro says the second quarter of 2015 was wrought with high profile vulnerabilities and hacks. Cybercriminals became more inventive in their attack methods to infiltrate and abuse existing technologies that are often overlooked.
These developments are analyzed in the Trend Micro Incorporated Q2 security roundup report released today, “A Rising Tide: New Hacks Threaten Public Technologies.”
The report details the evolution of tools and methods attackers use to get the greatest return on every cybercrime investment.
“We saw a shift in the threat landscape with cyber criminals becoming more sophisticated and creative, amplifying existing methods of attack, and using them in new ways,” said Raimund Genes, the chief technology officer at Ottawa, Ont.-based Trend Micro. “This quarter demonstrated that the potential damage caused by cyber attacks extends far beyond a simple software bug to hacks of airplanes, smart cars and television stations.”
The company said that hackers are taking more strategic approaches, refining their approach and targeting more selective victims to improve their infection rates. This is reflected by the exponential increase in the use of several traditional attack methods, including a 50% increase in the integration of the Angler exploit kit, a 67% growth in overall exploit kit-related threats, and small businesses on both sides of the US- Canadian border hard, together accounting for over 87% of all worldwide Cryptowall infections.
The report also details targeted campaigns using macro malware, new command and control (C&C) servers, and the continued use of newly exploited vulnerabilities and 0-days Pawn Storm. It noted that lone wolf cybercriminals are gaining notoriety via successful ransomware and PoS attacks. These included:
* FighterPoS and MalumPoS deployed by solo hackers “Lordfenix” and “Frapstar,” along with Hawkeye keylogger attacks, demonstrated that single individuals are capable of making a significant impact in today’s threat marketplace.
* Canadian Lone-wolf cybercriminal “Frapstar” built a one person criminal enterprise supplying fake Canadian passports and stolen credit card information to other cybercriminals.