theDocumentId => 1132454 Webroot Alerts Online Shoppers To Holiday ...

Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

11/20/2009
04:24 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Webroot Alerts Online Shoppers To Holiday Cyberthreats: Data-Stealing Malware On The Rise

Survey reveals behaviors that may put shoppers' personal and financial information at risk

BOULDER, Colo., Nov. 18 /PRNewswire/ -- From phony emails to Facebook phishers, cybercriminals are casting a wide net to lure online shoppers this season. According to new research from Webroot, a leading provider of Internet security for consumers and businesses, certain infections designed to steal personal information rose in the months leading up to the shopping season. Simultaneously, in a survey of consumers, Webroot found the majority (68 percent) plan to buy at least half of their gifts online this year, presenting cybercriminals with a larger target on Cyber Monday and throughout the holidays.

Surveying over 1,600 individuals, Webroot found the number of consumers planning to buy gifts online this season increased 46 percent from two years ago. The survey also revealed a number of behaviors that may put shoppers' personal and financial information at risk. Among the key findings:

-- Over half (52 percent) of respondents frequently, if not always, use search engines to find gifts online -- About two in five (38 percent) trust the first page of search results - a target for malicious links -- Twelve percent are likely to use a public wireless access point to shop online for gifts

"Cybercriminals appear to be gearing up for a lucrative holiday season," said Mike Kronenberg, chief technology officer of Webroot's Consumer business. "A particularly concerning trend is an increase in phishing Trojans - which can steal credit card numbers, passwords and other information -- in the months leading up to November, just as people begin thinking about buying gifts. Remember that hackers don't take a holiday; be aware of how they operate and protect yourself."

Primary Methods for Stealing Information

The Webroot½ Threat Research team has recorded a recent spike in certain phishing Trojans, including one which rose 73 percent since August. Called Trojan-Backdoor-Stinkbreath, it spreads via bogus emails bearing the names of shipping companies including FedEx, DHL, UPS and USPS - brands many shoppers expect to see this time of year.

Webroot has also detected a rise in attacks on social networks, which may pose a risk to consumers planning to use social media for researching gifts. Infections of the Koobface worm, which targets users of Facebook, Twitter and other networks, have jumped 15 percent since summer. Koobface is known to distribute fake security alerts and rogue antivirus products -- bogus malware infection warnings and malicious programs masquerading as legitimate security products - which trick victims into sharing information.

Webroot researchers also expect to see cybercriminals employ one of their most effective tactics - planting malicious links near the top of search engine results - to bait shoppers seeking hot deals on popular items. These malicious links also lead to fake alerts and rogue products, as well as other malicious payloads.

Finally, public wireless networks pose a risk to the 12 percent of survey respondents who plan to use them while shopping online for gifts. Data thieves can modify their own laptops to mimic wireless access points in places such as airports or cafes, and capture passwords and other information as victims unwittingly connect to their fraudulent networks.

Survey Finding: Convenience Outweighs Concerns

Results of the Webroot survey indicate online shoppers are willing to risk the consequences of the threat landscape for the convenience of buying gifts online:

-- Two thirds (66 percent) of respondents prefer to buy holiday gifts online, up from about 38 percent two years ago -- Almost half (47 percent) are concerned about stolen credit card and bank account numbers -- Despite that, only 4 percent said strong concerns would reduce the amount of gift shopping they complete online this season

Tips for Safe Online Shopping:

Webroot recommends individuals take the following actions before buying gifts online this season:

-- Search and click wisely -- Never click links to unfamiliar Web sites. If you use a search engine to find gifts, treat every result with caution - especially the ones promising a link to an unbelievable deal. -- Have antivirus and antispyware protection - Protect your PC with an Internet security suite that includes antivirus, antispyware, and firewall technologies. -- Always install updates - If you're using antimalware software, be sure to install updates which include the latest malware definitions; do the same with updates to your operating system. -- Exercise caution when using public wireless networks - Be wary of using free networks in airports, coffee shops and other locations where your Internet session could be hijacked. -- Use a credit card, Not a debit card, and monitor your credit - If you are a victim of fraud or cybercrime, most credit card agreements limit your liability for the charges. And monitor your credit report and/or credit status on a regular basis to quickly spot anything unusual.

Webroot encourages online shoppers to use its free scan to search their computers for dormant security threats before shopping online this season.

For more information about Webroot's award-winning antimalware protection for consumers, please visit http://www.webroot.com/En_US/consumer.html.

About the Research

In November 2009, Webroot sponsored online surveys of Internet users in the United States and United Kingdom. The panel management company e-Rewards invited panel members who own a PC or laptop, have an Internet connection at home, and spend at least one hour per week online at home to participate in the study. With a total of 1,616 respondents, the margin of error is +/- 2.4 percentage points at the 95 percent confidence level.

About Webroot

Webroot, a Boulder, Colorado-based company provides industry-leading security solutions to consumers, enterprises and small to medium-sized businesses worldwide. For more information, visit www.webroot.com or call 800.772.9383. Visit our Threat Blog at http://blog.webroot.com.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-32686
PUBLISHED: 2021-07-23
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback and ...
CVE-2021-32783
PUBLISHED: 2021-07-23
Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy rem...
CVE-2021-3169
PUBLISHED: 2021-07-23
An issue in Jumpserver 2.6.2 and below allows attackers to create a connection token through an API which does not have access control and use it to access sensitive assets.
CVE-2020-20741
PUBLISHED: 2021-07-23
Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote attackers to bypass authentication via the "CE Remote Display Tool" as it does not close the incoming connection on the Windows CE side if t...
CVE-2021-25808
PUBLISHED: 2021-07-23
A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.