Cyber Risks · Krebs on Security

A Closer Look: Email-Based Malware Attacks

Summary: A Krebs on Security analysis of daily reports from University of Alabama at Birmingham students found that email-based malware campaigns over the prior month frequently spoofed brands including Amazon, the Better Business Bureau, DHL, Facebook, LinkedIn, PayPal, Twitter and Verizon Wireless, and that the average antivirus detection rate for the samples was 24.47 percent with a median of 19 percent. About two-thirds of the top attacks used exploit kits, most often BlackHole, which check browsers for outdated plugins such as Flash, Java and Adobe Reader and silently install malware through them.

Why it matters: With a median detection rate of 19 percent, clicking a malicious link or opening an attachment carries less than a one-in-five chance your antivirus flags it, and the spoofed brands are ones users commonly whitelist.

Read the original at Krebs on Security ↗

Topics
Malware
Related