• Save
2012 February Symantec Intelligence Report
Upcoming SlideShare
Loading in...5
×
 

Like this? Share it with your network

Share

2012 February Symantec Intelligence Report

on

  • 3,800 views

Symantec's February Symantec Intelligence Report shows a new wave of cyber-attacks designed to impersonate a well-known business mediation and arbitration service in North America.

Symantec's February Symantec Intelligence Report shows a new wave of cyber-attacks designed to impersonate a well-known business mediation and arbitration service in North America.

Statistics

Views

Total Views
3,800
Views on SlideShare
3,577
Embed Views
223

Actions

Likes
2
Downloads
0
Comments
0

1 Embed 223

http://www.scoop.it 223

Accessibility

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

2012 February Symantec Intelligence Report Presentation Transcript

  • 1. Symantec Intelligence Report February 2012Symantec Intelligence 1
  • 2. February 2012 – Report Highlights Spam – 68.0 percent (a decrease of 1.0 percentage points since January 2011) Phishing – One in 358.1 emails identified as phishing (an increase of 0.01 percentage points since January 2011) Malware – One in 274.0 emails contained malware (an increase of 0.03 percentage points since January 2011) Malicious Web sites – 2,305 Web sites blocked per day (an increase of 9.7 percent since January 2011) New wave of cyber-attacks designed to impersonate the Better Business Bureau Blogs review Best Practices for Enterprises and UsersSymantec Intelligence 2
  • 3. Spam Rate & Sources 3
  • 4. Additional Spam MetricsGlobal Spam Categories Size of Spam Messages February January 2011 February January Category Name Message Size 2012 2012 2011 Adult/Sex/Dating 43.0% 22.5% 0Kb – 5Kb 58.6% 55.7% Pharmaceutical 30.5% 38.0% 5Kb – 10Kb 26.1% 30.5% Watches/Jewelry 9.0% 27.5% >10Kb 15.2% 13.8% Weight Loss 4.5% 3.5% Unknown/Other 2.5% 1.5% Software 2.0% 0.5% Spam Attack Vectors Jobs/Recruitments 1.5% 0.5% Malware 1.5% <0.5% Scams/Fraud/419 1.5% 0.5% Unsolicited Newsletters 1.0% 2.5% Casino/Gambling 1.0% 2.0% Phishing 1.0% <0.5% Degrees/Diplomas 0.5% 0.5%Symantec Intelligence 4
  • 5. Phishing Rate & Sources 5
  • 6. Additional Phishing Metrics Geographic Location of Phishing Web Sites 6
  • 7. Additional Phishing Metrics Tactics of Phishing Distribution Organizations Spoofed in Phishing Attacks, by IndustrySymantec Intelligence 7
  • 8. Email Malware Rate 8
  • 9. Additional Malware Metrics Frequently Blocked Email-borne Malware Malware Name % Malware Exploit/SpoofBBB 5.22% W32/Bredolab.gen!eml.j 4.62% Exploit/Link-generic-ee68 4.21% Trojan.Bredolab 3.37% Exploit/LinkAliasPostcard-4733 3.05% VBS/Generic 2.25% Exploit/FakeAttach 2.10% Exploit/Link-5434 1.84% Packed.Generic.349 1.68% Trojan.Bredolab!eml-30e2 1.62% NB: 27.4 percent of email-borne malware contained links to malicious Web sitesSymantec Intelligence 9
  • 10. Web-based Malware Analysis Malware and Spyware Sites Blocked Per Day Web Policy Risks from Inappropriate UseSymantec Intelligence 10
  • 11. Most Frequently Blocked Malware at the Endpoint Frequently Blocked Malware by Endpoint Security Malware Name1 % Malware WS.Trojan.H 28.05% W32.Sality.AE 4.38% W32.Downadup.B 3.53% W32.Ramnit.B!inf 3.43% W32.Ramnit!html 3.18% Trojan.Maljava 2.92% W32.Ramnit.B 2.80% Trojan.ADH.2 2.39% Trojan.Malscript!html 1.89% Trojan.ADH 1.49% NB: Approximately 17.1 percent of the most frequently blocked malware last month was identified and blocked using generic detection. *For further information on these threats, please visit: http://www.symantec.com/business/security_response/landing/threats.jspSymantec Intelligence 11
  • 12. Where to next?• Web: – www.symanteccloud.com/intelligence – www.symantec.com/spam – www.symantec.com/alert – www.facebook.com/symantec• Intranet – syminfo.ges.symantec.com/hostedservices• Twitter: – @symantec – @symanteccloud – @threatintelSymantec Intelligence 12