McAfee Inc., the leading dedicated security technology company, today announced findings from new research which reveals how organised crime is grooming a new generation of high-flying cybercriminals using tactics which echo those employed by the KGB to recruit operatives at the height of the cold war.
The second annual McAfee report into organised crime and the Internet, with input from Europe's leading hi-tech crime units and the FBI, suggests crime gangs are targeting top students from leading academic institutions to provide them with the skills they need to commit hi-tech crime on a mass scale.
The study reveals how Internet savvy teens as young as 14 are being attracted into cybercrime by the celebrity status of hi-tech criminals and the promise of making money without the risks associated with traditional crime.
The report also shows how cyber criminals are moving away from bedrooms and into public places such as Internet cafes and wi-fi enabled coffee shops.
Other key findings from the McAfee Virtual Criminology Report 2006 include:
• The Cult of Cybercrime: Cybercrime has established a cult following with online offenders rising almost to celebrity status within hacking communities. Specialist forums to highlight potential security issues have also served to showcase ‘black hat’ tricks and criminal opportunity
• The Malware Milkround: Organised crime is now employing KGB-style tactics to ensnare the next generation of hackers and malware authors. Cybercriminals are actively approaching students and graduates of IT technology courses to recruit a fresh wealth of cyber skill to their ranks
• Inside Jobs: Taking advantage of inadequate company security procedures, current and former employees, contractors and suppliers are instigating the vast majority of hacking attacks. Cybercrooks are sponsoring graduates with a view to gaining the lucrative insiders view of enterprises.
“Cybercrime is no longer in its infancy, it is big business. Criminal entrepreneurs can make fast money with minimal risk and their ranks are growing with that realisation. With technology continually evolving, criminal opportunity is also growing; opportunity that is global and unrestricted by geography, language or appearance,” said Patrick Hayati, Regional Director, McAfee Inc. Middle East.
The McAfee Virtual Criminology Report 2006 highlights how the virtual anonymity and stealth of attack that the online environment affords means detection is a growing challenge for law enforcement. McAfee has highlighted the following as the main threats, tools and opportunities that organised crime is exploiting:
Mind Games: Cybercriminals are increasingly resorting to psychological warfare in order to succeed. Phishing emails have increased by approximately 25% over the last year but are harder to detect as they increasingly trick unsuspecting people with ordinary scenarios instead of improbable ones such as sudden cash windfalls. ‘Spear phishing’ is growing in prevalence, tricking users into giving away user names and passwords by seemingly coming from employers or fellow colleagues. These more tailored mind games achieve high success rates and slide under the mass attack radar, seeking out smaller institutions and consumers with targets changing almost daily.
Social Scams: Cybercriminals are being drawn to the huge crowds of the social networking and community sites. Loading fake profiles and pages with adware, spyware and trojans, money making malware authors are cashing in on their popularity. They are also collating personal information divulged online to formulate virtual twin identities for fraudulent purposes.
Data Seepage: Data is continually exposed without need for sophisticated attack and cybercriminals are cashing in. Password proliferation for consumer and work devices means often simple guesswork unlocks the door; unsecured removable media devices such as USB sticks provide an easy route for information-transfer and increasing convergence of technologies means inadequate security and integrated risk.
Botnets: As predicted in last years report, botnets – robot networks of illegally linked computers that can be controlled remotely – are now the preferred method for Internet thieves to effectively execute attacks. At least 12 million computers around the world are now compromised and are used for phishing schemes, illegal spamming, spreading pornography and stealing passwords and identities. Open-source criminal collaboration is also generating more robust and reliable botnets with guaranteed ROI.
The Future: The report also highlights threats that will become much more prevalent over the next 12 months. Smartphones and multifunctional mobiles are making portable computers essential lifestyle accessories and predictions are that cybercriminals will increasingly mine them for valuable information in the coming months. The increasing use of Bluetooth and VoIP will also lead to a new generation of phone hacking.
By sharing its insight and knowledge of 20 years experience in security, McAfee hopes to help people and businesses proactively protect themselves 24/7 against the latest cyber threats and prevent the disruption or theft of vital personal or corporate information.
About McAfee, Inc
McAfee Inc., the leading dedicated security technology company, headquartered in Santa Clara, California, delivers proactive and proven solutions and services that secure systems and networks around the world. With its unmatched security expertise and commitment to innovation, McAfee empowers home users, businesses, the public sector, and service providers with the ability to block attacks, prevent disruptions, and continuously track and improve their security. http://www.mcafee.com.
NOTE: McAfee is a registered trademark of McAfee, Inc. and/or its affiliates in the United States and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2006 McAfee, Inc. All rights reserved. About McAfee, Inc:
the sole property of their respective owners. © 2006 McAfee, Inc. All Rights Reserved.
