Risk
6/29/2009
05:02 PM
George V. Hulme
George V. Hulme
Commentary
Connect Directly
RSS
E-Mail
50%
50%

Social Network Users Increasingly Under Siege

We all knew this was coming. As Social Networks gained in popularity, they'd become more juicy targets. Now we're starting to see some data.

We all knew this was coming. As Social Networks gained in popularity, they'd become more juicy targets. Now we're starting to see some data.According to a sample of brands used in MarkMonitor's brandjacking index, phishing attacks, overall, are up 36 percent for the first three months of this year compared to the same year ago period. Considering how prevalent phishing attacks have become, it's almost hard to believe they can continue to grow. Really: what is saturation plus more? But that's a digression.

From DarkReading:

Phishing attacks on social networking sites increased more than 240 percent compared to the same time last year, just behind attacks on payment services, which jumped a whopping 285 percent versus the first quarter of '08. "They exploit the trust one user has with another [on a social network]. There's a tendency to open up something from one of your 'friends' on these sites," says Frederick Felman, chief marketing officer at MarkMonitor. "This is the biggest innovation in phishing attacks since RockPHISH, and it's more social than technical exploitation. RockPHISH was an infrastructure play, but this is using someone else's infrastructure to spread the badness."

The good news, however, is that social networks are relatively quick to shut down phishing attacks on their sites, Felman says.

It is good news that social networks are clamping down quickly. But what this ultimately means is that the attackers are going to adapt their tactics. And, I expect, these trends will become more pronounced as a result:

1. Highly-targeted "spear" phishing attacks will become even more common.

2. Large-scale attacks, with extraordinarily high numbers of targeted users, that begin and end within minutes will also become more common.

3. Legitimate accounts will be hacked, in greator numbers, to commit fast "smash and grab" like digital attacks on social networking sites such as Facebook, Twitter, and LinkedIn.

Ultimately, this means the trustworthiness of social network users, as well as Web sites in general, will need to be better established and vetted even more quickly.

Also, you had better hope that that link, or attachment, or whatever being sent to you by your "friend" is really coming from your friend - and not someone who just hacked your friend's account.

This area of information security -- the abuse of social networks through both technical and social engineering attacks -- is just getting started.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-5700
Published: 2014-09-22
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) username or (3) password parameter in blocks/loginbox/loginbox.template.php to index.php. NOTE: some o...

CVE-2014-0484
Published: 2014-09-22
The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment."

CVE-2014-2942
Published: 2014-09-22
Cobham Aviator 700D and 700E satellite terminals use an improper algorithm for PIN codes, which makes it easier for attackers to obtain a privileged terminal session by calculating the superuser code, and then leveraging physical access or terminal access to enter this code.

CVE-2014-3595
Published: 2014-09-22
Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

CVE-2014-3635
Published: 2014-09-22
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows remote attackers to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one m...

Best of the Web
Dark Reading Radio