To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://software.silicon.com/malware/0,3800003100,39185353,00.htm

Phishers attack social networking generation
Users too trusting with personal data…

By Darren Osborne and Alex Serpo

Published: Wednesday 09 April 2008

Social-networking websites are fast becoming a key target for online fraud, according to Symantec's latest Internet Security Threat Report.

The report reveals that, for the second half of 2007, there were 87,963 "phishing hosts", an increase of 167 per cent from the first half of 2007. The report states "66 per cent of phishing attacks in the US were directed towards social-networking sites".

Security from A to Z

Click on the links below to find out more...

A is for Antivirus
B is for Botnets
C is for CMA
D is for DDoS
E is for Extradition
F is for Federated identity
G is for Google
H is for Hackers
I is for IM
J is for Jaschan (Sven)
K is for Kids
L is for Love Bug
M is for Microsoft
N is for Neologisms
O is for Orange
P is for Passwords
Q is for Questions
R is for Rootkits
S is for Spyware
T is for Two-factor authentication
U is for USB sticks/devices
V is for Virus variants
W is for Wi-fi
X is for OS X
Y is for You
Z is for Zero-day

Symantec Australia managing director Craig Scroggie said social-networking sites are a treasure trove of personal data, listing information such as birthdays, location and employment history.

Scroggie said: "[Users of these] websites are putting up a large amount of confidential information that is being used for fraudulent activity and financial gain." The Symantec report notes social-networking sites are attractive to cybercriminals because such pages "are generally trusted by users".

Personal information is collected and sold on the internet black market, for as little as $1. Scroggie said: "We're starting to see the area mature significantly."

The report also notes vulnerabilities in websites are increasingly popular malware vectors as they allow for more sophisticated and multi-stage attacks.

Scroggie added that some people used the proceeds of these sales to fund further attacks. "People are employing programmers dedicated to the production of those threats," Scroggie said.

While the report found that most attacks continue to occur and originate in the US, China is becoming increasingly important as a source of malicious code.

Scroggie said: "Russia was implicated in the widespread distribution of malicious code over the last couple of years. That dropped off in 2007 but [security threats] have recently re-emerged in China."

Scroggie said the spread of malicious code was expected to increase, with the growing use of portable data-storage devices. "There is an increased security threat from portable media devices, whether it be a USB flash drive or an MP3 player," he said.