Learn about Zero Trust Architecture
Impenetrable cybersecurity without sacrificing usability
Gain detailed visibility into all your endpoints activities
Harden applications and hardware environments
Immediate and continuous response to incidents
Close the window of time your data could be exposed
Get your Comodo solutions setup, deployed or optimized
Control access to malicious websites
Defend from any internet based threats
Stop email threats before it enters your inbox
Preserve and protect your sensitive data
Keep your website running fast and malware free
Add encryption to your websites
Automated certificate mgmt. platform
Secure private intranet environments
Digital signature solutions for cloud apps
Encrypt emails for senders and recipients
Stay compliant with PCI DSS
Trusted authentication for IoT devices
Francisco Partners a leading technology-focused private equity fund, has acquired a majority stake in Comodo’s certificate authority business. Newly renamed from Comodo CA Limited to Sectigo Limited. Privacy Policies, Trademarks, Patents and Terms & Conditions are available on Sectigo Limited’s web site.
Meet the people behind the direction for Comodo
Get the latest news about Comodo
People are the key to achievement and prosperity
Stay up to date with our on-demand webinars
Worldwide: Sales, Support and General Inquiries
Schedule a live demonstration of our solutions
Need immediate help? Call 1-888-551-1531
Instantly removes viruses to keep your PC virus free
Experience true mobile security on your mobile apple devices
Secure Internet Browser based on Chrome
Chrome browser internet security extension
Submit a ticket to our support team
Share any product bugs or security flaws
Collaborate with research experts on data sets
Valkyrie Threat Intelligence Plugins
Valkyrie Threat Intelligence APIs
There is a recent study by the “Anti Phishing Working Group” (APWG) being widely reported that phishing attacks were down 20% in 2012.
When I first read about this I thought,
“They HAVE to be kidding!”
There is a flood of other stories that contradict such a finding, including numerous reports of high profile attacks. Last week, in fact, we learned that a Syrian group had a successful email phishing attack on White House staffers. A member of the “Syrian Electronic Army” (SEA), supporters of dictator Bashar al-Assad, proudly distributed screen prints of White House staffer Erin Lindsey’s Gmail account emails. Ms. Lindsey made the mistake of clicking on a link in a faux email from the SEA.
American Banker Magazine this week is reporting on a “spike” in email phishing that targets bank customers. I can testify that I get emails almost every day about my accounts at Banks I don’t use!
Yet, the APWG is a reputable group supported by many of the biggest names in Internet Security and corporate America. How can we reconcile this?
First, if there has been a decline in phishing attacks in 2012 it is the context of a dramatic rise in recent years. There is no standard metric, but there is every indication that email phishing scams have been booming. Even a 20% decline would leave a lot of phishing going on. Second, an important metric in the report is a decline in the number of compromised servers being used in phishing scams. The scammers seize control of a server hosting multiple domains and then create phishing pages for each domain.
In recent years that has been a significant decline in storage costs and processing power. Just last year my own internet host increased the available storage in my web site plan from 300gb to 1tb without increasing my plan cost. It was 30mb when I first started with them in 2003!
This has made it possible to host more domains per server. It is likely that a decline in the number of servers compromised does not translate to the same percentage of domains compromised. They may also be using compromised servers for other nasty purposes, such as spamming and botnets.
Even if the total volume of phishing is down as the AFWG report also asserts, there is every reason to believe that it is because they are becoming more targeted, more selective. There may be fewer mass mailings with low probabilities of success and more sophisticated attacks that actually victimize their targets. That would explain why the volume could be down but we are reading about more and more successful high profile attacks.
In support of my theory I found a report by the German Internet Security firm Eleven Research that found email spam declining in 2012 but the “threat level” increasing. That’s because email spam and phishing attacks have become far more target and much more dangerous. Drive by email, where the email entices the victim to click on a link and download malware, was 10% of all email span. This is an all-time high as a percentage of spam.
Eleven Research also asserts that a higher percentage of phishing is “spear phishing” than ever before. A spear phishing attack targets particular individuals and organizations, as opposed to mass mailings that count on a small percentage of a volume to be duped. Orchestrator’s of spear phishing attacks use internet sources including social media to learn about a victim and their colleagues to craft emails that appear convincingly legitimate.
I wouldn’t click on the link in an email from a South African barrister handling the estate of a possible relative. However, I just might for a webinar that my company is actually planning that appears to come from a co-worker.
Scammers have found social media a treasure trove of information to use in targeted attacks, and they are becoming more sophisticated. SpiderLabs, the penetration testing division of the security firm TrustWave, has unveiled a tool that analyzes an individual’s Twitter content and can assist in creating writing that appears to come from that individual. It coaches the actual writer on the style and content that would be expected from the purported author. There are indications that such tools are already in use by hackers.
Regardless of the volume of attacks, Eleven Research has it right. The threat level is increasing!
Sign up to our cyber security newsletter
Comodo Cybersecurity would like to keep in touch with you about cybersecurity issues, as well as products and services available. Please sign up to receive occasional communications. As a cybersecurity company, we take your privacy and security very seriously and have strong safeguards in place to protect your information.
See how your organization scores against cybersecurity threats