Cyber crooks winning in security battle

2014-05-27 08:33
Cyber criminals use spam as a malware delivery method. (Duncan Alfreds, News24)

Cyber criminals use spam as a malware delivery method. (Duncan Alfreds, News24)

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories

Cape Town - Hackers are always one step ahead of computer security professionals because the nature of the crime is to test hardware and software for vulnerabilities, says a security expert.

"The nature of being an attacker is to be on offensive, to know where you’re going before your opponent. The reality for network operators is, they are going through a significant period of transformation in networking, computing and mobility," Anton Jacobsz, managing director of Networks Unlimited told News24.

Computer security has emerged as a battle ground where cyber criminals have indicated their intent to steal personal financial information.

Online giant eBay announced that hackers had stolen usernames and passwords of at least 145 million people on its platform, though the company was careful to insist that credit card information was not stolen.

As companies shift their hardware to online systems, cyber crooks have identified new opportunities where there may a weak link in the security chain.

Not aware

"Some significant shifts are taking place, to the cloud, mobile devices, and these shifts deliver tremendous cost savings and productivity benefits to businesses. They also present new opportunities for attackers. Corporate information today does not sit in a walled garden, with a resilient perimeter," said Jacobsz.

Worryingly, most companies are not aware when their networks have been compromised.

The 2014 Trustwave Global Security Report found that 71% of breached firms do not detect the break-in themselves and it took two weeks to contain the intrusion when detected by a third party.

As more devices are connected to the internet, Jacobsz argued that it presented criminal with opportunities to steal personal data.

"More internet connected devices means more vulnerabilities and opportunities for attackers."

Cyber criminals use spam as a malware delivery method. (Duncan Alfreds, News24)

Cyber attackers will typically use personal information to craft spam for specific individuals in order to convince them that the unsolicited mail is genuine.

The US has charged a number of senior Chinese officials with hacking corporate networks, but the Justice department said the attacks were more like slapstick instead of cybercrime.

Spam techniques

Attackers used simple spam techniques that caused officials to inadvertently download malware on to computers.

Security firm Kaspersky Lab said that the upcoming Soccer World Cup has seen a spike in the sophistication of attacks, with criminals even purchasing valid SSL certificates.

"In one scam, users in Brazil would receive a message telling them they had won a World Cup game ticket. If a user clicked on the link to print the ticket, it led to a digitally signed Trojan banker," said the company.

Jacobsz said that security policy for companies and individuals should be focused on layers, rather than one solution.

"It is usually not one thing that enables a breach, but a breakdown between the products, people and process."

- Follow Duncan on Twitter
Read more on:    trustwave  |  kaspersky lab  |  online privacy  |  cybercrime

Join the conversation! encourages commentary submitted via MyNews24. Contributions of 200 words or more will be considered for publication.

We reserve editorial discretion to decide what will be published.
Read our comments policy for guidelines on contributions.
NEXT ON NEWS24X publishes all comments posted on articles provided that they adhere to our Comments Policy. Should you wish to report a comment for editorial review, please do so by clicking the 'Report Comment' button to the right of each comment.

Comment on this story
Comments have been closed for this article.

Inside News24

Traffic Alerts
There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire network.


Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.