Cyber Risks · Krebs on Security

Email-Based Malware Attacks, July 2012

Summary: Krebs on Security reported that email-based malware attacks in the prior 30 days spoofed brands including American Airlines, Ameritrade, Craigslist, Facebook, FedEx, HP, Kraft, UPS and Xerox, and that antivirus tools detected the samples about 22 percent of the time on the first day, with a median of 17 percent. Most attacks in that period required the recipient to open a zipped executable file, and attackers changed the file icon to resemble a Word or PDF document.

Why it matters: A 17 percent median first-day detection rate means the antivirus most recipients rely on misses roughly five of every six of these samples when they first arrive, and the lure is often a brand name they already trust.

Read the original at Krebs on Security ↗

Topics
Malware
Related