Website Security Threats: September 2013 Update

Website Security Threats: September 2013 Update

WEBSITE SECURITY THREATS:SEPTEMBER 2013 UPDATE

Thursday 26th September 2013

Andrew [email protected] [email protected]

Agenda• The month in numbers• Hackers for hire• Data breaches• ATM Trojans• Celebrity infections

Website Security Threats: September 2013 Update

The month in numbers….• Over 48% of people who quit Facebook did it because of privacy concerns

• Hackers set up a 10,000 USD bounty for the first person who can crack the iPhone 5S fingerprint scanner

• The average cost associated with a cyberattack for small businesses was almost 8,700 USD

• 78% of smartphone users say they won't download an untrusted app

• New research says 51% of US teenagers avoid certain apps over privacy concerns

• It's no wonder that phishing attacks still work - 30% would open an email even if it seemed suspicious

• Speaking of Phishing…about 20% more brands were targeted by attackers in the first half of 2013.

Website Security Threats: September 2013 Update

Hackers for hire

http://www.symantec.com/connect/blogs/hidden-lynx-professional-hackers-hire

Website Security Threats: September 2013 Update

Types of companies being attacked from inside and out

Website Security Threats: September 2013 Update

The volume of attacks against smaller businesses

increased x 3when compared with 2011,

resulting in itspercentage almost doubling

from 18%to 31%

Hackers for Hire

Website Security Threats: September 2013 Update

Consumers are becoming less vigilant about protecting their safety online

• Consumers are becoming less vigilant about protecting their safety online

• Almost 30% said that they use secured wireless networks, down from 36% last year

• 42% use passwords with upper and lower case letters, numbers and/or symbols, compared to 49% in 2012

• 39% conduct transactions through reputable websites only, down from 48% last year and 60% in 2011.

• 17% use a PIN or password to lock a smartphone while just 8% use a mobile security app or feature.

Website Security Threats: September 2013 Update

German Data breach • 2 Million identities stolen in

Germany• Names, addresses, dob, genders

and banking details compromised• Attacker was an insider.

Website Security Threats: September 2013 Update

Money for (almost nothing)Compromised ATMs in Mexico handing out cash to criminals.

Website Security Threats: September 2013 Update

Car passes physical safety tests….but fails the security test.

Website Security Threats: September 2013 Update

iPhone 5S Finger print

Website Security Threats: September 2013 Update

The new iPhone fingerprint reader relies on the living layer of skin in order to authenticate the owner.

Lily who?Users searching for Lily Collins pictures and downloads, have a 14.5% chance of visiting a website with spyware, adware, spam and other malware.

Website Security Threats: September 2013 Update

Link Glossary (Press Print screen now)• What happens in an internet

minute– http://intel.ly/15sGJgy

• Facebook Privacy concerns– http://bit.ly/1b57zdu

• App concerns– http://bit.ly/15sHINH

• Hidden Lynx; Hackers for hire blog post– http://bit.ly/18VVyZM

• Insider threats– http://bit.ly/1eGx8Wk

• Cyber Attacks on SMB– http://bit.ly/1gZOLNF

• Iphone finger print reader needs your living finger….– http://bit.ly/18YGYL8

• Iphone fingerprint hack– http://bit.ly/1bFqiPF

• Celebs the lure for malware– http://bit.ly/16yVBDZ

Website Security Threats: September 2013 Update

Thank you!

Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

Andrew [email protected] / +44 7912 552896Andrew [email protected] / +44 7703 468966

Website Security Threats: September 2013 Update

Next webinar: 24th October 2013 9.30am GMT/10.30am CET