Group photo, From left: David Rajoo, Eric Koh & Nigel Tan
Internet is now a very common technology used by us. Well, most of us don’t know that the internet is also a threat. Symantec had come out with the Internet Security Threat Report that provides an overview and analysis of the year in global threat activity. The report is based on data from Symantec’s Global Intelligence Network, which Symantec analysts use to identify, analyse, and provide commentary on emerging trends in attacks, malicious code activity, phishing, and spam.
After lurking in the shadows for the first ten months of 2013, cybercriminals unleashed the most damaging series of cyberattacks in history. Symantec Corp’s shows that a significant shift in cybercriminal behaviour – revealing the bad guys are plotting for months before pulling off huge heists, instead of executing quick hits with smaller rewards.
In 2013, there was a 62 percent increase in the number of data breaches globally from the previous year, resulting in more than 552 million identities exposed – proving cybercrime remains a real and damaging threat to consumers and businesses alike. One mega breach can possibly be worth 50 smaller attacks.
Eric Hoh, Vice President, Asia South and Korea Regions, Symantec
Eric Hoh, Symantec’s Vice President for Asia South and Korea regions said that:
While the level of sophistication continues to grow among cyber attackers, what was surprising last year was the cyber attackers’ willingness to be a lot more patient – waiting to strike until the reward is bigger and better. With cybercriminals constantly innovating and enhancing their modes of attacks, companies globally and in Malaysia cannot afford to let their guard down. The consequences of complacency can be far-reaching, causing commercial and reputation damage.
Nigel Tan, Director, Systems Engineering, Malaysia
Nigel Tan, Director of Systems Engineering at Symantec Malaysia said:
Malaysia’s Internet security profile declined last year and ranked 33rd among countries globally on Internet security threat activities. This is a clear indication that cybercriminals have not slowed down, in fact they are increasing the efficiency of their campaigns and have their eye on Small and Medium Businesses (SMBs) with less than 500 employees, in particular the healthcare and transport/utility sectors in Malaysia.
During the Mega Data Breaches, Each of the eight top data breaches in 2013 resulted in the loss of tens of millions of data records where the average of identities exposed were 4 times greater than 2012. What was lost during Mega Data Breaches? Real names, birth dates, government ID numbers, username & passwords, financial information and other personal details. It seen that all this information is useless to some of us but all this information is still very valuable in the underground company.
Malaysia was rank 35 (the higher the rank the higher the threat) for worldwide country ranking on Internet Security Threat Activity(Malicious code, Phishing, Spam, Bots, Network and Web attacks) in year 2012 and rank 33 in year 2013 among 157 countries. Although it just raise by 2 ranks but this had also shown a big shift in the cybercriminals. Meanwhile, healthcare and transport is in the top for spam or phishing and malware which is also the top threat in the Industry.
Defense is Harder than Offense
The size and scope of data breaches globally is exploding, putting the trust and reputation of businesses at risk, and increasingly compromising consumers’ personal information – from credit card numbers and medical records to passwords and bank account details.
David Rajoo, Principal Consultant, Malaysia
David Rajoo, Principal Consultant at Symantec Malaysia said:
For cybercriminals, the potential for huge paydays means large-scale cyber attacks are here to stay. Companies of all sizes need to re-examine, re-think and possibly re-architect their security posture.
What is interesting is the targeted attacks became slow and low as cyber attackers increased the number of campaigns they ran, but decreased the emails used and the number of people they attacked in each campaign. It’s almost as if they brought in efficiency experts to improve their attack campaigns
Targeted attacks were up 91 percent globally in 2013 and lasted an average of three times longer compared to 2012. Personal assistants and those working in public relations were the two most targeted professions – cybercriminals use them as a stepping stone toward higher-profile targets like celebrities or business executives.
Q & A session with media
How to Maintain Cyber Resiliency
While the increasing flow of data from smart devices, apps and other online services is tantalising to cybercriminals, there are steps businesses and consumers can take to better protect themselves – whether it be from a mega data breach, targeted attack or common spam. Symantec had recommended the following best practices:
For Businesses:
Know your data: Protection must focus on the information – not the device or data centre. Understand where your sensitive data resides and where it is flowing to help identify the best policies and procedures to protect it.
Educate employees: Provide guidance on information protection, including company policies and procedures for protecting sensitive data on personal and corporate devices.
Implement a strong security posture: Strengthen your security infrastructure with data loss prevention, network security, endpoint security, encryption, strong authentication and defensive measures, including reputation-based technologies.
For Consumers:
Be security savvy: Passwords are the keys to your kingdom. Use password management software to create strong, unique passwords for each site you visit and keep your devices – including smartphones – updated with the latest security software.
Be vigilant: Review bank and credit card statements for irregularities, be cautious when handling unsolicited or unexpected emails and be wary of online offers that seem too good to be true – they usually are.
Know who you work with:Familiarise yourself with policies from retailers and online services that may request your banking or personal information. As a best practice, visit the company’s official website directly (as opposed to clicking on an emailed link) if you must share sensitive information.
As a conclusion, no matter you are in big business,small entrepreneur, industries sector or a normal person like me that always in contact with internet. We always need to take extra precaution in protecting your own personal detail or important data that had been saved on the internet or any other social media. Therefore, lets reduce cybercriminals and increase our awareness toward this internet threat.
