Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

Spear Phishers Aiming At SMBs

Pilfered email addresses and personal information from Epsilon and Sony breaches will make attacks on SMBs even more likely.

10 Massive Security Breaches
(click image for larger view)
Slideshow: 10 Massive Security Breaches
As news of new breaches associated with targeted phishing attacks stream the wires, and hackers continue to refine their method of homing in on highly specific victims, it is becoming clear that this season is shaping up to be the summer of spear phishing. The breaches at RSA, Epsilon, and the International Monetary Fund (IMF) all showed signs that spear phishing was used as the point of origin for more sophisticated attacks. And while some of the splashier stories have featured enterprises foiled by spear phishing, the threat is very real for small businesses as well.

Security researchers from Symantec this month reported that spear phishing is currently at a two-year high, with the majority of attack schemes targeting individuals--particularly high-value victims, such as small businesses, that might have larger bank accounts than consumers, but fewer security tools and less awareness than large organizations.

“Spear phishing is difficult to defend against because it primarily targets users, not PCs, and the information that attackers can gather from social networking sites makes the phishing emails look very convincing," says David Beesley, managing director of security consultancy Network Defence. "As we’ve seen, it makes these attacks effective against any size of organization."

According to Francis de Souza, group president of enterprise products and services for Symantec, these attacks "thrive on familiarity," with attackers using the abundance of personal information available online through social networks and through a plethora of black market information available from past data breaches involving email addresses to craft very personalized phishing messages.

"All of this information, where someone works, their title, where they went to school: It is all available on the Web, so you can design a spear-phishing email very easily, and it can absolutely fool pretty much anybody," says Brent Remai, vice president of marketing for FireEye. "They click on it, and guess what? They're infected, and then it propagates itself to all the other devices in the organization."

And with millions more addresses and personal details hitting the street in the wake of the Epsilon and Sony breaches, the deluge is bound to get worse.

"[With Sony], it's 100 million users at significant risk of spear phishing and identity theft, and that risk is perpetual. It is not going to go away," says Jon Heimerl, director of strategic security for Solutionary. "Once that information is out, it is out: names, addresses, email addresses, birthdates, user names, and challenge questions. All of it can be used."



Read the rest of this article on Dark Reading.

Small and midsize businesses are falling prey to cyberattacks that cost them sensitive data, productivity, and corporate accounts cleaned out by sophisticated banking Trojans. In this report, we explain what makes these threats so menacing, and share best practices to defend against them. Download it now. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-2287
PUBLISHED: 2022-07-02
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-34911
PUBLISHED: 2022-07-02
An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the usern...
CVE-2022-34912
PUBLISHED: 2022-07-02
An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won't be escaped.
CVE-2022-34913
PUBLISHED: 2022-07-02
** DISPUTED ** md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input.
CVE-2022-2286
PUBLISHED: 2022-07-02
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.