Security Threats
Blended Threat
A blended threat is a sophisticated attack that bundles some of the worst aspects of viruses, worms, Trojan horses and malicious code into one threat. Blended threats use server and Internet vulnerabilities to initiate, transmit and spread an attack. This combination of method and techniques means blended threats can spread quickly and cause widespread damage. Characteristics of blended threats include: Causes harm, propagates by multiple methods, attacks from multiple points and exploits vulnerabilities.
Did You Know...
CodeRed, a blended threat, launched Denial of Service (DoS)
attacks and, defaced Web servers, and its variant, CodeRed II, left Trojan
horses behind for later execution. CodeRed was processed in memory —
not on a hard disk — allowing it to slip past some anti-virus products.
Computer Economics has estimated the worldwide cost of CodeRed at $2.62
billion.
[Source: Symantec]
Only when a breach involves private and
confidential client information are companies required by law to disclose
the breach publicly.
NEW!
Read more about the latest laws | Virginia Enacts
Security Breach Law
Phishing & Spear Phishing
Phishing
is the act of sending an e-mail to a user falsely claiming to be an established
legitimate enterprise in an attempt to scam the user into surrendering private
information.
Spear phishing is a targeted form of phishing in which an e-mail message appears to come from your employer, or from a colleague who might send an e-mail message to everyone in the company, such as the head of human resources or IT.
Trojan horse
A
destructive program, otherwise known as malicious software or malware, that
appears to perform a desirable function but in fact performs undisclosed
malicious functions. Unlike viruses, Trojan horses do not replicate themselves
but they can be just as destructive.
Here are just a few of the things a Trojan Horse can do:
|
Spyware
Any software that covertly gathers user information through the user's Internet connection without his or her knowledge is known as spyware.
Spyware applications typically are bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet; However, it should be noted that the majority of shareware and freeware applications do not come with spyware.
Once installed, spyware monitors user activity on the Internet and transmits that information in the background to someone else. Spyware can also gather information about e-mail addresses, passwords and credit card numbers. Spyware is similar to a Trojan horse in that users unwittingly install the product when they install something else.
Keylogger (Keystroke Logging)
A keylogger is a type of surveillance software (considered to be either software or spyware) that has the capability to record every keystroke you make to a log file (usually encrypted). A keylogger recorder can record instant messages, e-mail, and any information you type at any time using your keyboard. The log file created by the keylogger can then be sent to a specified receiver. Some keylogger programs will also record any e-mail addresses you use and Web site URLs you visit.
Keyloggers are often used by employers as a surveillance tool to ensure employees use work computers for business purposes only. Unfortunately, keyloggers also can be embedded into spyware, allowing your information to be transmitted to an unknown third party.
Worm Virus
Worm
viruses spread through operating system flaws faster than the virus protection
companies can deploy the signatures required to prevent or clean the infection.
Recent examples of this type of infection would be the SQL Slammer
and Blaster viruses. These viruses cost companies millions
of dollars and still can be found infecting systems today! Worm's are mitigated
with a disciplined approach of patch management, intrusion detection based
on behavior and a prompt response.
Virus
Viruses are something almost everyone has experienced to one degree or another, but because we have anti-virus software, we tend to feel less threatened by them. However, in order for the global virus database to be updated, someone must be infected and engineers must have enough data to identify and characterize the virus.
Hundreds of thousands of people can be affected by the virus before a detection method is developed and the virus eliminated. If you’re lucky, the virus will only be an annoying inconvenience; However, some viruses are distructive and the permanent loss of data.
Hackers
Hackers are another way in which data can be lost. Most of the hacking we hear about involves individuals breaking into a system for private information. What we don’t hear about is hackers breaking into a system and compromising data. Companies that experience a breach are reluctant to report it, fearing the effect on their public image. Most never know it ever even happened. If you have a firewall and virus protection and think you are protected… think again.