haemmerle-consulting, profile picture
Uploaded byhaemmerle-consulting
665 views

Symantec Intelligence Report 2013

The Symantec Intelligence Report for December 2013 provides the following key information: 1) Targeted attacks decreased in December after above average numbers in October and November. Large organizations of 2500+ employees are targeted in 39% of attacks. 2) The number of data breaches reported increased in December, many of which occurred earlier in the year. The largest breach exposed 40 million identities in November. 3) The number of new mobile malware variants declined for the third straight month to 161 new variants in December. 4) A total of 471 new vulnerabilities were discovered in December, bringing the yearly total to 6,436. Browser vulnerabilities in Google Chrome and plug-in vulnerabilities in Oracle Java led among

Embed presentation

SYMANTEC INTELLIGENCE REPORT DECEMBER 2013
p. 2 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 CONTENTS CONTENTS 3 Executive Summary 4 BIG NUMBERS 7 TARGETED ATTACKS 8 Targeted Attacks in 2013 8 Targeted Attacks per Day 8 First Attacks Logged by Month 9 Attacks by Size of Targeted Organization 9 Top 10 Industries Attacked 9 First Attacks Logged by Size 9 File Extensions of Attachments 10 Social Media 11 Social Media 11 Top 5 Social Media Attacks, 2013 12 DATA BREACHES 13 Data Breaches 13 Top 5 Types of Information Exposed 13 Timeline of Data Breaches, 2013 14 MOBILE 19 SPAM, PHISHING, & MALWARE 20 Spam 20 Top 5 Activity for Spam Destination by Geography 20 Top 5 Activity for Spam Destination by Industry 21 Top 10 Sources of Spam 21 Average Spam Message Size 21 Top 5 Activity for Spam Destination by Company Size 21 Spam by Category 21 Spam URL Distribution Based on Top Level Domain Name 22 Phishing 22 Top 10 Sources of Phishing 22 Top 5 Activity for Phishing Destination by Company Size 22 Top 5 Activity for Phishing Destination by Industry 22 Top 5 Activity for Phishing Destination by Geography 23 Phishing Distribution 23 Organizations Spoofed in Phishing Attacks 24 Malware 24 Proportion of Email Traffic in Which Virus Was Detected 24 Top 10 Email Virus Sources 25 Top 5 Activity for Malware Destination by Industry 25 Top 5 Activity for Malware Destination by Geographic Location 25 Top 5 Activity for Malware Destination by Company Size 26 Endpoint Security 26 Top 10 Most Frequently Blocked Malware 15 Mobile 15 Mobile Malware by Type 16 Cumulative Mobile Android Malware 27 Policy Based Filtering 27 Policy Based Filtering 17 VULNERABILITIES 28 More Information 18 Vulnerabilities 18 Total Vulnerabilities Disclosed by Month 18 Browser Vulnerabilities 18 Plug-in Vulnerabilities 28 About Symantec
p. 3 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Executive Summary Welcome to the December edition of the Symantec Intelligence report. Symantec Intelligence aims to provide the latest analysis of cyber security threats, trends, and insights concerning malware, spam, and other potentially harmful business risks. This month, we see the email virus rate increase for the second month in a row, reaching an annual high of one in 164 emails. Targeted attacks continue to focus on the Service-related industries, both in the professional and non-traditional realms. Two out of every five targeted attacks appear to be focused on these Service categories. We also saw an increase in the overall number of data breaches reported in December, many of which occurred in previous months. Many of these disclosures from earlier in the year could be due to various regulations and/or laws requiring the disclosure of a breach during the year it occurred. In other news, the number of mobile malware variants has declined for the third month in a row, and global spam rate has increased this month, after a two month decline. We hope that you enjoy this month’s report and feel free to contact us with any comments or feedback. Ben Nahorney, Cyber Security Threat Analyst symantec_intelligence@symantec.com
p. 4 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 BIG NUMBERS
p. 5 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Estimated Global Email Spam Rate Per Day Overall Email Phishing Rate: HIGHER NUMBER = LOWER RISK SPAM AS PERCENT OF ALL EMAIL 1 in 1,134 1 in 1,311 1 in 1,053 Oct Nov Dec 100 90 80 70 60 68% 62% 64% 50 40 Overall Email Virus Rate: 30 20 10 HIGHER NUMBER = LOWER RISK Oct 0 Oct Nov Dec 1 in 437 Nov Dec 1 in 253 1 in 164 New Vulnerabilities Oct Mobile Vulnerabilities Oct Nov Dec 5 6 1 Nov Dec 663 438 471
p. 6 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Mobile Malware Variants 10000 VARIANTS (CUMULATIVE) 9000 7,612 8000 7000 6000 193 5000 4000 186 161 3000 2000 132 1000 D JAN 2013 F M A M J J A S O N D Oct Nov Dec Data Breaches Number of Breaches (Year-to-Date) 215 Number of Identities Exposed (Year-to-Date) 342,794,556
p. 7 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 TARGETED ATTACKS
p. 8 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Targeted Attacks in 2013 At a Glance Targeted Attacks per Day Source: Symantec • Targeted attacks were down in December, after above-average numbers in October and November. • The .exe file type was the most common attachment, making up 31.3% of email-based targeted attacks that included file attachments. 225 200 TARGETED ATTACKS • Large organizations of 2500+ are targeted in 39% of attacks, though organizations with fewer than 250 employees are targeted more often, based on first attacks. 250 175 150 125 100 75 50 25 JAN FEB MAR APR 2011 MAY JUN 2012 JUL AUG 2013 SEP OCT NOV DEC 2013 TREND (Projected) First Attacks Logged by Month Source: Symantec 1200 1100 1000 900 800 700 600 500 400 300 200 100 JAN 2013 F M A M J J A S O N D
p. 9 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Attacks by Size of Targeted Organization First Attacks Logged by Size Source: Symantec Source: Symantec Company Size Percent Company Size Percent 1-250 29.8% 1-250 52.5% 251-500 10.7% 251-500 10.9% 501-1000 9.5% 501-1000 9.2% 1001-1500 3.3% 1001-1500 5.1% 1501-2500 7.6% 1501-2500 4.9% 2500+ 39.0% 2500+ 17.4% Top 10 Industries Attacked File Extensions of Attachments Source: Symantec Source: Symantec Industry Percent File Extension Percent Services - Professional 20.1% .exe 31.3% Services - Non Traditional 18.5% .scr 18.4% Public Administration 14.8% .doc 7.9% .pdf 5.3% Finance, insurance & Real Estate 13.4% .class 4.7% .jpg 3.8% Manufacturing 11.1% Transportation, communications, electric, gas & Sanitary Services 8.0% .dmp 2.7% Wholesale 5.2% .dll 1.8% Retail 2.2% .au3 1.7% Nonclassifiable Establishments 2.0% .xls 1.2% Logistics 1.8% The “Professional” services category includes services such as Legal, Accounting, Health, and Education. “Non-Traditional” services include Hospitality, Recreational, and Repair services.
p. 10 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 SOCIAL MEDIA
p. 11 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Social Media At a Glance Top 5 Social Media Attacks, 2013 Source: Symantec • 81 percent of all social media attacks in 2013 where fake offerings. This is up from 56 percent in 2012. • Likejacking is the secondmost common type of social media attack at 7 percent, though it is down from 2012, when it made up 10 percent. • Fake Apps have risen overall in 2013, making up 2 percent of social media attacks. In 2012, this category was ranked sixth. Top Social Media Attacks 81% Fake Offering 7% Likejacking 6% Fake Plugin 2% Fake Apps 2% Manual Sharing Methodology Fake Offering. These scams invite social network users to join a fake event or group with incentives such as free gift cards. Joining often requires the user to share credentials with the attacker or send a text to a premium rate number. Fake Plug-in Scams. Users are tricked into downloading fake browser extensions on their machines. Rogue browser extensions can pose like legitimate extensions but when installed can steal sensitive information from the infected machine. Likejacking. Using fake “Like” buttons, attackers trick users into clicking website buttons that install malware and may post updates on a user’s newsfeed, spreading the attack. Fake Apps. Applications provided by attackers that appear to be legitimate apps; however, they contain a malicious payload. The attackers often take legitimate apps, bundle malware with them, and then re-release it as a free version of the app. Manual Sharing Scams. These rely on victims to actually do the hard work of sharing the scam by presenting them with intriguing videos, fake offers or messages that they share with their friends.
p. 12 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 DATA BREACHES
p. 13 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Data Breaches Timeline of Data Breaches, 2013 At a Glance Source: Symantec • The largest breach that was reported in December actually occurred during November, where 40 million identities were exposed. 40 120 105 32 90 24 75 60 16 45 30 NUMBER OF INCIDENTS • Of the reported breaches so far, the top three types of information exposed are a person’s real name, government ID number (e.g. Social Security), and birth date. 135 IDENTITIES BREACHED (MILLIONS) • There were a number of breaches reported during December that occurred earlier in the year. This brings the total number of reported breaches to 215 so far for 2013. 48 150 8 15 D JAN 2013 F M A M J J A S IDENTITIES BREACHED O N D INCIDENTS Top 5 Types of Information Exposed Source: Symantec Information Exposed in Breaches % OF ALL BREACHES Real Names 70% Gov ID numbers (Soc Sec) 40% Birth Dates 40% Home Address 36% Medical Records 31% Methodology This data is procured from the Norton Cybercrime Index (CCI). The Norton CCI is a statistical model that measures the levels of threats, including malicious software, fraud, identity theft, spam, phishing, and social engineering daily. The data breach section of the Norton CCI is derived from data breaches that have been reported by legitimate media sources and have exposed personal information. In some cases a data breach is not publicly reported during the same month the incident occurred, or an adjustment is made in the number of identities reportedly exposed. In these cases, the data in the Norton CCI is updated. This causes fluctuations in the numbers reported for previous months when a new report is released. Norton Cybercrime Index http://us.norton.com/protect-yourself
p. 14 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 MOBILE
p. 15 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Mobile At a Glance Mobile Malware by Type Source: Symantec • 33 percent of mobile malware tracks users in 2013, up from 15 percent in 2012. • Traditional threats, such as back doors and downloaders are present in 20 percent of all mobile malware threats. • Risks that collect data, the most common risk in 2012, is down 12 percentage points to 20 percent of risks. • Four new mobile malware families were discovered in December, along with 132 new variants. 33% 21% Track User Adware/Annoyance Risks that spy on the individual using the device, collecting SMS messages or phone call logs, tracking GPS coordinates, recording phone calls, or gathering pictures and video taken with the device. Mobile risks that display advertising or generally perform actions to disrupt the user. 20% 20% Traditional Threats Collect Data Threats that carry out traditional malware functions, such as back doors and downloaders. This includes the collection of both device- and user-specific data, such as device information, configuration data, or banking details. 10% 8% Change Settings Send Content These types of risks attempt to elevate privileges or simply modify various settings within the operating system. These risks will send text messages to premium SMS numbers, ultimately appearing on the bill of the device’s owner. Other risks can be used to send spam messages.
p. 16 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Cumulative Mobile Android Malware Source: Symantec 9000 320 8000 280 7000 240 6000 200 5000 160 4000 120 3000 80 2000 40 1000 D JAN 2013 F M A M J J A S FAMILIES O N D VARIANTS VARIANTS (CUMULATIVE) 10000 360 FAMILIES (CUMULATIVE) 400
p. 17 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 VULNERABILITIES
p. 18 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Vulnerabilities At a Glance Total Vulnerabilities Disclosed by Month Source: Symantec • There were 471 new vulnerabilities discovered in December, bringing the total for the year up to 6436, a 18 percent increase compared to 2012. • There was one vulnerability in mobile operating systems disclosed during the month of December. • Google’s Chrome browser continues to lead in reporting browser vulnerabilities, while Oracle’s Java leads in reported plug-in vulnerabilities. 800 700 600 500 400 300 200 100 D • Two zero-day vulnerabilities were disclosed during the month of December. JAN 2013 F M A M J J A Browser Vulnerabilities O N Plug-in Vulnerabilities Source: Symantec S Source: Symantec 60% Apple Safari Google Chrome Microsoft Internet Explorer Mozilla Firefox Opera Adobe Acrobat Reader Adobe Flash Player Apple QuickTime Oracle Sun Java 60% 50% 50% 40% 40% 30% 30% 20% 20% 10% 10% D
p. 19 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 SPAM, PHISHING, & MALWARE
p. 20 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Spam At a Glance Top 5 Activity for Spam Destination by Geography Source: Symantec • The global spam rate increase 1.8 percentage points in December to 64 percent, up from 62.2 percent in November. • Education was the most commonly targeted industry, taking the top spot for the second month in a row. Geography Percent • The .com top-level domain (TLD) was again the most frequently used malicious TLD in December. Sri Lanka 75.2% Israel 71.6% France 71.5% Saudi Arabia 69.2% China 69.1% • Sex Dating spam is the most common category, at 76.3 percent. Pharmaceutical and Job-related spam tied for second at 9.2 percent each. Top 5 Activity for Spam Destination by Industry Source: Symantec Industry Percent Education 65.9% Gov/Public Sector 65.6% Non-Profit 65.4% Chem/Pharm 65.1% IT Services 64.9%
p. 21 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Top 10 Sources of Spam Top 5 Activity for Spam Destination by Company Size Source: Symantec Source: Symantec Source Percent of All Spam Company Size Percent  Spain 7.6% 1-250 63.7%  United States 7.6% 251-500 64.0%  Finland 6.4% 501-1000 63.7%  Argentina 5.1% 1001-1500 64.1%  Italy 4.9% 1501-2500 63.8%  India 4.1% 2501+ 64.2%  Canada 4.0%  Brazil 3.7%  Peru 3.5%  Romania 3.1% Spam by Category Source: Symantec Category Sex/Dating Month* 0Kb – 5Kb 5Kb – 10Kb >10Kb Nov 37.0% 24.7% 38.4% Oct 40.2% 26.0% 9.2% Jobs Source: Symantec 76.3% Pharma Average Spam Message Size Percent 9.2% Watches 1.8% Software 1.3% 33.8% *Data lags one month Spam URL Distribution Based on Top Level Domain Name Source: Symantec Month* .com .info .us .biz Nov 36.7% 26.1% 10.1% 9.6% Oct 26.1% n/a 11.8% 17.7% *Data lags one month
p. 22 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Phishing Top 5 Activity for Phishing Destination by Company Size At a Glance Source: Symantec • The global phishing rate is up in December, comprising one in 1 in 1,053 email messages. In November this rate was one in 1 in 1,311. Company Size Rate • Financial themes continue to be the most frequent subject matter, with 61.6 percent of phishing scams containing this theme. 1-250 1 in 862 • The United Kingdom had the highest rate in December, where one in 530 emails was a phishing scam. 251-500 1 in 944 • Australia tops the list of sources of phishing emails, responsible for distributing 35.9 percent of phishing scams. 501-1000 1 in 1,489 • The Public Sector was the most targeted industry in December, with one in every 173 emails received in this industry being a phishing scam. 1001-1500 1 in 1,811 1501-2500 1 in 1,963 2501+ 1 in 2,905 Top 10 Sources of Phishing Top 5 Activity for Phishing Destination by Industry Source: Symantec Source: Symantec Source Percent Industry Rate Australia 35.9% Public Sector 1 in 173 New Zealand 29.3% Finance 1 in 652 United States 18.8% Education 1 in 803 United Kingdom 6.0% Accom/Catering 1 in 834 South Africa 3.5% Marketing/Media 1 in 1,016 Sweden 2.1% Chile 1.3% Netherlands 0.5% Canada 0.3% Malaysia 0.3% Top 5 Activity for Phishing Destination by Geography Source: Symantec Geography Rate United Kingdom 1 in 530 Australia 1 in 734 Mexico 1 in 1,062 New Zealand 1 in 1,073 Italy 1 in 1,096
p. 23 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Phishing Distribution Organizations Spoofed in Phishing Attacks Source: Symantec Source: Symantec Organizations Spoofed in Phishing Attacks: Phishing Distribution: Automated Toolkits 48.6% Financial Other Unique Domains 43.0% 61.6% Information Services IP Address Domains 4.3% Free Web Hosting Sites 3.3% Typosquatting 0.8% 33.8% Retail 5.2% Computer Software 0.9% Communications 0.5%
p. 24 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Malware Top 10 Email Virus Sources At a Glance Source: Symantec • The global average virus rate in December was one in 164 emails, compared to one in 253 in November. Geography 14.0% United States 13.9% Australia 2.7% France 0.9% South Africa 0.9% Japan 0.8% Netherlands 0.7% Singapore 0.5% Hong Kong • Small-to-medium size businesses with 1-250 employees were the most targeted company size, where one and 147 emails contained a virus. 60.7% Sri Lanka • The United Kingdom was also the largest source of virus-laden emails, making up 60.7 percent of all email-based viruses. Percent United Kingdom • The United Kingdom topped the list of geographies, with one in 65 emails containing a virus. 0.5% Proportion of Email Traffic in Which Virus Was Detected Source: Symantec 1 in 50 1 in 100 1 in 150 1 in 200 1 in 250 1 in 300 1 in 350 1 in 400 1 in 450 1 in 500 D JAN 2013 F M A M J J A S O N D
p. 25 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Top 5 Activity for Malware Destination by Industry Top 5 Activity for Malware Destination by Geographic Location Source: Symantec Source: Symantec Industry Rate Geography Rate Public Sector 1 in 33 United Kingdom 1 in 65 Education 1 in 76 Switzerland 1 in 128 Accom/Catering 1 in 122 Austria 1 in 200 Recreation 1 in 150 Ireland 1 in 201 Prof Services 1 in 151 Hungary 1 in 256 Top 5 Activity for Malware Destination by Company Size Source: Symantec Company Size Rate 1-250 1 in 147 251-500 1 in 150 501-1000 1 in 167 1001-1500 1 in 183 1501-2500 1 in 213 2501+ 1 in 324
p. 26 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Endpoint Security At a Glance Top 10 Most Frequently Blocked Malware Source: Symantec • Variants of W32.Ramnit accounted for 8.1 percent of all malware blocked at the endpoint. • In comparison, 4.3 percent of all malware were variants of W32.Sality. • Approximately 30.1 percent of the most frequently blocked malware last month was identified and blocked using generic detection. Malware Percent W32.Sality.AE 5.7% W32.Ramnit!html 4.8% W32.Ramnit.B 4.1% W32.Almanahe.B!inf 3.6% W32.Downadup.B 3.5% W32.Ramnit.B!inf 2.9% Trojan.Zbot 2.5% W32.Virut.CF 1.9% W32.SillyFDC 1.5% W32.Mabezat.B!inf 1.0%
p. 27 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 Policy Based Filtering At a Glance Policy Based Filtering Source: Symantec • The most common trigger for policy-based filtering applied by Symantec Web Security .cloud for its business clients was for the “Social Networking” category, which accounted for 50.8 percent of blocked Web activity in December. • “Advertisement & Popups” was the second-most common trigger, comprising 21.1 percent of blocked Web activity. Category Percent Social Networking 50.8% Advertisement & Popups 21.1% Streaming Media 4.9% Hosting Sites 3.6% Computing & Internet 3.4% Search 1.8% Chat 1.6% Gambling 1.3% News 1.1% Entertainment 1.0%
p. 28 Symantec Corporation Symantec Intelligence Report :: DECEMBER 2013 About Symantec Symantec protects the world’s information and is a global leader in security, backup, and availability solutions. Our innovative products and services protect people and information in any environment—from the smallest mobile device to the enterprise data center to cloudbased systems. Our world-renowned expertise in protecting data, identities, and interactions gives our customers confidence in a connected world. More information is available at www.symantec.com or by connecting with Symantec at go.symantec.com/socialmedia. More Information •  Security Response Publications: http://www.symantec.com/security_response/publications/ •  Internet Security Threat Report Resource Page: http://www.symantec.com/threatreport/ •  Symantec Security Response: http://www.symantec.com/security_response/ •  Norton Threat Explorer: http://us.norton.com/security_response/threatexplorer/ •  Norton Cybercrime Index: http://us.norton.com/cybercrimeindex/
Confidence in a connected world. For specific country offices and contact numbers, please visit our website. For product information in the U.S., call toll-free 1 (800) 745 6054. Symantec Corporation World Headquarters 350 Ellis Street Mountain View, CA 94043 USA +1 (650) 527 8000 1 (800) 721 3934 www.symantec.com Copyright © 2014 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, and the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

More Related Content

PDF
Istr19 en
byAnjoum .
 
PDF
Symantec Cyber Security Intelligence Report
bySymantec
 
PDF
Symantec Intelligence Report
bySymantec
 
PDF
Symantec Intelligence Report - July 2014
bySymantec
 
PDF
Symantec Intelligence Report September 2014
bySymantec
 
PDF
Symantec Intelligence Report - June 2014
bySymantec
 
PDF
B intelligence report-08-2013.en-us
byКомсс Файквэе
 
PDF
Symantec Intelligence Report - Oct 2015
byCheapSSLUSA
 
Istr19 en
byAnjoum .
 
Symantec Cyber Security Intelligence Report
bySymantec
 
Symantec Intelligence Report
bySymantec
 
Symantec Intelligence Report - July 2014
bySymantec
 
Symantec Intelligence Report September 2014
bySymantec
 
Symantec Intelligence Report - June 2014
bySymantec
 
B intelligence report-08-2013.en-us
byКомсс Файквэе
 
Symantec Intelligence Report - Oct 2015
byCheapSSLUSA
 

What's hot

PDF
The 2014 Data Breach Investigations Report
by- Mark - Fullbright
 
PDF
Symantec Website Security Threat Report 2014 - RapidSSLOnline
byRapidSSLOnline.com
 
PDF
Symantec Internet Security Threat Report Volume 2015
byWaqas Amir
 
PDF
Breach level index_report_2017_gemalto
byJonas Mercier
 
PDF
Symantec Internet Security Threat Report 2014 - Volume 19
bySymantec
 
PDF
ISTR Volume 18
bySymantec
 
PDF
RSA 2013 Session: Mobile Security Smackdown: How Government “Pwned” The Priva...
bySymantec
 
PDF
Intelligence report-06-2015.en-us[1]
bySergey Ulankin
 
PDF
Symantec Internet Security Threat Report 2011 Trends Volume 17 April 2012
bySymantec
 
PDF
2020 Data Breach Investigations Report (DBIR)
by- Mark - Fullbright
 
PDF
Ey giss-under-cyber-attack
byКомсс Файквэе
 
PDF
2019 Data Breach Investigations Report (DBIR)
by- Mark - Fullbright
 
PDF
IBM X-Force Threat Intelligence Quarterly 1Q 2014
byIBM Software India
 
PDF
Istr number 23 internet security threat repor 2018 symantec
bySoluciona Facil
 
PDF
IMC 618 - Public Relations Campaign
byStephanie Holman
 
PDF
Apwg trends report_q1-q3_2015
byAndrey Apuhtin
 
PDF
Malwarebytes labs 2019 - state of malware report 2
byFelipe Prado
 
PDF
E-threat landscape report H1 2012
byBitDefenderRo
 
PDF
H1 2011 E-Threat Landscape Report
byBitdefender
 
The 2014 Data Breach Investigations Report
by- Mark - Fullbright
 
Symantec Website Security Threat Report 2014 - RapidSSLOnline
byRapidSSLOnline.com
 
Symantec Internet Security Threat Report Volume 2015
byWaqas Amir
 
Breach level index_report_2017_gemalto
byJonas Mercier
 
Symantec Internet Security Threat Report 2014 - Volume 19
bySymantec
 
ISTR Volume 18
bySymantec
 
RSA 2013 Session: Mobile Security Smackdown: How Government “Pwned” The Priva...
bySymantec
 
Intelligence report-06-2015.en-us[1]
bySergey Ulankin
 
Symantec Internet Security Threat Report 2011 Trends Volume 17 April 2012
bySymantec
 
2020 Data Breach Investigations Report (DBIR)
by- Mark - Fullbright
 
Ey giss-under-cyber-attack
byКомсс Файквэе
 
2019 Data Breach Investigations Report (DBIR)
by- Mark - Fullbright
 
IBM X-Force Threat Intelligence Quarterly 1Q 2014
byIBM Software India
 
Istr number 23 internet security threat repor 2018 symantec
bySoluciona Facil
 
IMC 618 - Public Relations Campaign
byStephanie Holman
 
Apwg trends report_q1-q3_2015
byAndrey Apuhtin
 
Malwarebytes labs 2019 - state of malware report 2
byFelipe Prado
 
E-threat landscape report H1 2012
byBitDefenderRo
 
H1 2011 E-Threat Landscape Report
byBitdefender
 

Viewers also liked

PDF
Audit des BCM
byhaemmerle-consulting
 
PDF
Munich RE Naturkatastrophen 2013 Überblick
byhaemmerle-consulting
 
PDF
Iso 22301 - der neue Standard für Business Continuity Management
byhaemmerle-consulting
 
PDF
Kochbuch für eine BIA von bcm news
byhaemmerle-consulting
 
PDF
BCM Planung
byhaemmerle-consulting
 
PDF
Alarmierung und Kommunikation im BCM
byhaemmerle-consulting
 
PDF
kes BCM in der Supply Chain
byhaemmerle-consulting
 
Audit des BCM
byhaemmerle-consulting
 
Munich RE Naturkatastrophen 2013 Überblick
byhaemmerle-consulting
 
Iso 22301 - der neue Standard für Business Continuity Management
byhaemmerle-consulting
 
Kochbuch für eine BIA von bcm news
byhaemmerle-consulting
 
BCM Planung
byhaemmerle-consulting
 
Alarmierung und Kommunikation im BCM
byhaemmerle-consulting
 
kes BCM in der Supply Chain
byhaemmerle-consulting
 

Similar to Symantec Intelligence Report 2013

PDF
Symantec Intelligence Report December 2014
bySymantec
 
PDF
Symantec Intelligence Report November 2014
bySymantec
 
PDF
Symantec's Internet Security Threat Report for the Government Sector
bySymantec
 
PDF
Internet security threat report 2013
byKarim Shaikh
 
PDF
Symantec Intelligence Report - October 2014
bySymantec
 
PDF
B istr main-report_v18_2012_21291018.en-us
byКомсс Файквэе
 
PDF
Symantec Intelligence Report: February 2015
bySymantec
 
PDF
Internet Security Threat Report 2014 :: Volume 19 Appendices - The hardcore n...
bySymantec
 
PDF
IBM X-Force Threat Intelligence Report 2016
bythinkASG
 
PDF
Symantec Intelligence Report August 2013
byKenn Peterson
 
PDF
STUDY: Website Vulnerability Assessment
bySymantec
 
PDF
b-istr_main_report_2011_21239364.en-us
byEric Johnson
 
PDF
Cyber Security Report 2019
byOmar Bshara
 
PDF
INFOGRAPHIC: Secure Computing as Threats Evolve
bySymantec
 
PPTX
Network
bySowndar S
 
PPTX
Cybercrime - Attack of the Cyber Spies
bySymantec Website Security
 
PDF
Symantec Intelligence Report: May 2015
bySymantec
 
PDF
Istr 21-2016-en
byAndrey Apuhtin
 
PDF
2016 Symantec Internet Security Threat Report
byRapidSSLOnline.com
 
PDF
HCA 530, Week 2, Symantec 2016 threat report
byMatthew J McMahon
 
Symantec Intelligence Report December 2014
bySymantec
 
Symantec Intelligence Report November 2014
bySymantec
 
Symantec's Internet Security Threat Report for the Government Sector
bySymantec
 
Internet security threat report 2013
byKarim Shaikh
 
Symantec Intelligence Report - October 2014
bySymantec
 
B istr main-report_v18_2012_21291018.en-us
byКомсс Файквэе
 
Symantec Intelligence Report: February 2015
bySymantec
 
Internet Security Threat Report 2014 :: Volume 19 Appendices - The hardcore n...
bySymantec
 
IBM X-Force Threat Intelligence Report 2016
bythinkASG
 
Symantec Intelligence Report August 2013
byKenn Peterson
 
STUDY: Website Vulnerability Assessment
bySymantec
 
b-istr_main_report_2011_21239364.en-us
byEric Johnson
 
Cyber Security Report 2019
byOmar Bshara
 
INFOGRAPHIC: Secure Computing as Threats Evolve
bySymantec
 
Network
bySowndar S
 
Cybercrime - Attack of the Cyber Spies
bySymantec Website Security
 
Symantec Intelligence Report: May 2015
bySymantec
 
Istr 21-2016-en
byAndrey Apuhtin
 
2016 Symantec Internet Security Threat Report
byRapidSSLOnline.com
 
HCA 530, Week 2, Symantec 2016 threat report
byMatthew J McMahon
 

More from haemmerle-consulting

PDF
Standards und good practices 20160325
byhaemmerle-consulting
 
PDF
BCM Standards 11.2014
byhaemmerle-consulting
 
PDF
World Disasters Report 2014
byhaemmerle-consulting
 
PDF
BCI Counting The Cost
byhaemmerle-consulting
 
PDF
BCM Glossary by BCI
byhaemmerle-consulting
 
PDF
World Economic Forum Global Risks 2014
byhaemmerle-consulting
 
PDF
Weltkarte der Naturkatastrophen 2013
byhaemmerle-consulting
 
PDF
Schäden aus Naturkatastrophen 2013 per Kontinent
byhaemmerle-consulting
 
PDF
Global Climate Risk Index 2014
byhaemmerle-consulting
 
PDF
Supply chain-resilience-2013-en
byhaemmerle-consulting
 
PDF
BCM Standards und Good Practices
byhaemmerle-consulting
 
PDF
BCAW 2013 poster english
byhaemmerle-consulting
 
PDF
Tests und übungen
byhaemmerle-consulting
 
PDF
BCM Lifecycle
byhaemmerle-consulting
 
PDF
BCM Strategien
byhaemmerle-consulting
 
PDF
Krisenmanagement Case Study
byhaemmerle-consulting
 
PDF
The hard realities of earthquake recovery for seattle
byhaemmerle-consulting
 
PDF
BCI Supply Chain Resilience 2012
byhaemmerle-consulting
 
PDF
BCM Stakeholder Management
byhaemmerle-consulting
 
PDF
Umfrageergebnisse "BC Manager Agenda 2012"
byhaemmerle-consulting
 
Standards und good practices 20160325
byhaemmerle-consulting
 
BCM Standards 11.2014
byhaemmerle-consulting
 
World Disasters Report 2014
byhaemmerle-consulting
 
BCI Counting The Cost
byhaemmerle-consulting
 
BCM Glossary by BCI
byhaemmerle-consulting
 
World Economic Forum Global Risks 2014
byhaemmerle-consulting
 
Weltkarte der Naturkatastrophen 2013
byhaemmerle-consulting
 
Schäden aus Naturkatastrophen 2013 per Kontinent
byhaemmerle-consulting
 
Global Climate Risk Index 2014
byhaemmerle-consulting
 
Supply chain-resilience-2013-en
byhaemmerle-consulting
 
BCM Standards und Good Practices
byhaemmerle-consulting
 
BCAW 2013 poster english
byhaemmerle-consulting
 
Tests und übungen
byhaemmerle-consulting
 
BCM Lifecycle
byhaemmerle-consulting
 
BCM Strategien
byhaemmerle-consulting
 
Krisenmanagement Case Study
byhaemmerle-consulting
 
The hard realities of earthquake recovery for seattle
byhaemmerle-consulting
 
BCI Supply Chain Resilience 2012
byhaemmerle-consulting
 
BCM Stakeholder Management
byhaemmerle-consulting
 
Umfrageergebnisse "BC Manager Agenda 2012"
byhaemmerle-consulting
 

Recently uploaded

DOCX
Buy Old Gmail Accounts – Academic & Professional Guide 2026.docx
byBuy iCloud Email Accounts
 
PDF
ICv2 White Paper - Navigating the New World of Comics
byDennisViau
 
PDF
Precision Agriculture 2026: Using Drones for Targeted Insecticide and Herbici...
byDhanuka Agritech Limited
 
PDF
On Demand Service Provider App Development
byV3CUBE TECHNOLABS
 
PDF
9 Best Sites to Buy Hotmail Accounts (PVA, Bulk &amp .pdf
by#marketing
 
PPTX
Myntra Seller Commission & Fees Guide | Ecommerce Account Management by Miloy...
byMiloy And Company
 
PPTX
PRELIMS for PES on world businesses.pptx
bySureshGKPESUniversit
 
PDF
MTD for Landlords – a closer look at the impact, requirements and software (H...
byFelixPerez547899
 
PDF
Smart Contract Audit Readiness What to Fix Before Auditors Review Your Code (...
bySoluLab1231
 
PDF
Daily-Ads Review: Top Affiliates Are SCARED to Tell You This.pdf
bysimplefreedomwarrior
 
PDF
Contract_Costing_Introduction and Basics
byANEESHA252224
 
PDF
How to Buy EDU Email Accounts_ A Comprehensive Guide in 2026.pdf
byonline marketing by pvaisback
 
PDF
Exhibitor Manual (IAIIExpo'26 V1 FW).pdf
bykumaraditya210
 
PPTX
Strategic Workforce Planning & Talent Strategy
bySeta Wicaksana
 
PDF
How Oversize Embroidery Design Size Is Measured
byInkdnylon
 
PDF
Buy Verified PayPal Accounts for Safe, Hassle-Free Transactions.pdf
by100 persent Verified Cash App Accounts Seller
 
PPTX
Sewage Treatment Plant in Bangalore |Best STP Plant Manufacturers in Tamilna...
byKemproPumps
 
PDF
Jay Bhaumik Plano - Skilled In Business Strategy, And Investment
byJay Bhaumik Plano
 
PDF
Kirill Klip GEM Royalty TNR Gold Presentation
byKirill Klip
 
PDF
Impact of Earnings Surprises on Short Term Asset Prices.pdf
bybharadwajduggarajupr
 
Buy Old Gmail Accounts – Academic & Professional Guide 2026.docx
byBuy iCloud Email Accounts
 
ICv2 White Paper - Navigating the New World of Comics
byDennisViau
 
Precision Agriculture 2026: Using Drones for Targeted Insecticide and Herbici...
byDhanuka Agritech Limited
 
On Demand Service Provider App Development
byV3CUBE TECHNOLABS
 
9 Best Sites to Buy Hotmail Accounts (PVA, Bulk &amp .pdf
by#marketing
 
Myntra Seller Commission & Fees Guide | Ecommerce Account Management by Miloy...
byMiloy And Company
 
PRELIMS for PES on world businesses.pptx
bySureshGKPESUniversit
 
MTD for Landlords – a closer look at the impact, requirements and software (H...
byFelixPerez547899
 
Smart Contract Audit Readiness What to Fix Before Auditors Review Your Code (...
bySoluLab1231
 
Daily-Ads Review: Top Affiliates Are SCARED to Tell You This.pdf
bysimplefreedomwarrior
 
Contract_Costing_Introduction and Basics
byANEESHA252224
 
How to Buy EDU Email Accounts_ A Comprehensive Guide in 2026.pdf
byonline marketing by pvaisback
 
Exhibitor Manual (IAIIExpo'26 V1 FW).pdf
bykumaraditya210
 
Strategic Workforce Planning & Talent Strategy
bySeta Wicaksana
 
How Oversize Embroidery Design Size Is Measured
byInkdnylon
 
Buy Verified PayPal Accounts for Safe, Hassle-Free Transactions.pdf
by100 persent Verified Cash App Accounts Seller
 
Sewage Treatment Plant in Bangalore |Best STP Plant Manufacturers in Tamilna...
byKemproPumps
 
Jay Bhaumik Plano - Skilled In Business Strategy, And Investment
byJay Bhaumik Plano
 
Kirill Klip GEM Royalty TNR Gold Presentation
byKirill Klip
 
Impact of Earnings Surprises on Short Term Asset Prices.pdf
bybharadwajduggarajupr
 

Symantec Intelligence Report 2013

  • 1.
  • 2.
    p. 2 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 CONTENTS CONTENTS 3 Executive Summary 4 BIG NUMBERS 7 TARGETED ATTACKS 8 Targeted Attacks in 2013 8 Targeted Attacks per Day 8 First Attacks Logged by Month 9 Attacks by Size of Targeted Organization 9 Top 10 Industries Attacked 9 First Attacks Logged by Size 9 File Extensions of Attachments 10 Social Media 11 Social Media 11 Top 5 Social Media Attacks, 2013 12 DATA BREACHES 13 Data Breaches 13 Top 5 Types of Information Exposed 13 Timeline of Data Breaches, 2013 14 MOBILE 19 SPAM, PHISHING, & MALWARE 20 Spam 20 Top 5 Activity for Spam Destination by Geography 20 Top 5 Activity for Spam Destination by Industry 21 Top 10 Sources of Spam 21 Average Spam Message Size 21 Top 5 Activity for Spam Destination by Company Size 21 Spam by Category 21 Spam URL Distribution Based on Top Level Domain Name 22 Phishing 22 Top 10 Sources of Phishing 22 Top 5 Activity for Phishing Destination by Company Size 22 Top 5 Activity for Phishing Destination by Industry 22 Top 5 Activity for Phishing Destination by Geography 23 Phishing Distribution 23 Organizations Spoofed in Phishing Attacks 24 Malware 24 Proportion of Email Traffic in Which Virus Was Detected 24 Top 10 Email Virus Sources 25 Top 5 Activity for Malware Destination by Industry 25 Top 5 Activity for Malware Destination by Geographic Location 25 Top 5 Activity for Malware Destination by Company Size 26 Endpoint Security 26 Top 10 Most Frequently Blocked Malware 15 Mobile 15 Mobile Malware by Type 16 Cumulative Mobile Android Malware 27 Policy Based Filtering 27 Policy Based Filtering 17 VULNERABILITIES 28 More Information 18 Vulnerabilities 18 Total Vulnerabilities Disclosed by Month 18 Browser Vulnerabilities 18 Plug-in Vulnerabilities 28 About Symantec
  • 3.
    p. 3 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Executive Summary Welcome to the December edition of the Symantec Intelligence report. Symantec Intelligence aims to provide the latest analysis of cyber security threats, trends, and insights concerning malware, spam, and other potentially harmful business risks. This month, we see the email virus rate increase for the second month in a row, reaching an annual high of one in 164 emails. Targeted attacks continue to focus on the Service-related industries, both in the professional and non-traditional realms. Two out of every five targeted attacks appear to be focused on these Service categories. We also saw an increase in the overall number of data breaches reported in December, many of which occurred in previous months. Many of these disclosures from earlier in the year could be due to various regulations and/or laws requiring the disclosure of a breach during the year it occurred. In other news, the number of mobile malware variants has declined for the third month in a row, and global spam rate has increased this month, after a two month decline. We hope that you enjoy this month’s report and feel free to contact us with any comments or feedback. Ben Nahorney, Cyber Security Threat Analyst symantec_intelligence@symantec.com
  • 4.
    p. 4 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 BIG NUMBERS
  • 5.
    p. 5 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Estimated Global Email Spam Rate Per Day Overall Email Phishing Rate: HIGHER NUMBER = LOWER RISK SPAM AS PERCENT OF ALL EMAIL 1 in 1,134 1 in 1,311 1 in 1,053 Oct Nov Dec 100 90 80 70 60 68% 62% 64% 50 40 Overall Email Virus Rate: 30 20 10 HIGHER NUMBER = LOWER RISK Oct 0 Oct Nov Dec 1 in 437 Nov Dec 1 in 253 1 in 164 New Vulnerabilities Oct Mobile Vulnerabilities Oct Nov Dec 5 6 1 Nov Dec 663 438 471
  • 6.
    p. 6 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Mobile Malware Variants 10000 VARIANTS (CUMULATIVE) 9000 7,612 8000 7000 6000 193 5000 4000 186 161 3000 2000 132 1000 D JAN 2013 F M A M J J A S O N D Oct Nov Dec Data Breaches Number of Breaches (Year-to-Date) 215 Number of Identities Exposed (Year-to-Date) 342,794,556
  • 7.
    p. 7 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 TARGETED ATTACKS
  • 8.
    p. 8 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Targeted Attacks in 2013 At a Glance Targeted Attacks per Day Source: Symantec • Targeted attacks were down in December, after above-average numbers in October and November. • The .exe file type was the most common attachment, making up 31.3% of email-based targeted attacks that included file attachments. 225 200 TARGETED ATTACKS • Large organizations of 2500+ are targeted in 39% of attacks, though organizations with fewer than 250 employees are targeted more often, based on first attacks. 250 175 150 125 100 75 50 25 JAN FEB MAR APR 2011 MAY JUN 2012 JUL AUG 2013 SEP OCT NOV DEC 2013 TREND (Projected) First Attacks Logged by Month Source: Symantec 1200 1100 1000 900 800 700 600 500 400 300 200 100 JAN 2013 F M A M J J A S O N D
  • 9.
    p. 9 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Attacks by Size of Targeted Organization First Attacks Logged by Size Source: Symantec Source: Symantec Company Size Percent Company Size Percent 1-250 29.8% 1-250 52.5% 251-500 10.7% 251-500 10.9% 501-1000 9.5% 501-1000 9.2% 1001-1500 3.3% 1001-1500 5.1% 1501-2500 7.6% 1501-2500 4.9% 2500+ 39.0% 2500+ 17.4% Top 10 Industries Attacked File Extensions of Attachments Source: Symantec Source: Symantec Industry Percent File Extension Percent Services - Professional 20.1% .exe 31.3% Services - Non Traditional 18.5% .scr 18.4% Public Administration 14.8% .doc 7.9% .pdf 5.3% Finance, insurance & Real Estate 13.4% .class 4.7% .jpg 3.8% Manufacturing 11.1% Transportation, communications, electric, gas & Sanitary Services 8.0% .dmp 2.7% Wholesale 5.2% .dll 1.8% Retail 2.2% .au3 1.7% Nonclassifiable Establishments 2.0% .xls 1.2% Logistics 1.8% The “Professional” services category includes services such as Legal, Accounting, Health, and Education. “Non-Traditional” services include Hospitality, Recreational, and Repair services.
  • 10.
    p. 10 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 SOCIAL MEDIA
  • 11.
    p. 11 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Social Media At a Glance Top 5 Social Media Attacks, 2013 Source: Symantec • 81 percent of all social media attacks in 2013 where fake offerings. This is up from 56 percent in 2012. • Likejacking is the secondmost common type of social media attack at 7 percent, though it is down from 2012, when it made up 10 percent. • Fake Apps have risen overall in 2013, making up 2 percent of social media attacks. In 2012, this category was ranked sixth. Top Social Media Attacks 81% Fake Offering 7% Likejacking 6% Fake Plugin 2% Fake Apps 2% Manual Sharing Methodology Fake Offering. These scams invite social network users to join a fake event or group with incentives such as free gift cards. Joining often requires the user to share credentials with the attacker or send a text to a premium rate number. Fake Plug-in Scams. Users are tricked into downloading fake browser extensions on their machines. Rogue browser extensions can pose like legitimate extensions but when installed can steal sensitive information from the infected machine. Likejacking. Using fake “Like” buttons, attackers trick users into clicking website buttons that install malware and may post updates on a user’s newsfeed, spreading the attack. Fake Apps. Applications provided by attackers that appear to be legitimate apps; however, they contain a malicious payload. The attackers often take legitimate apps, bundle malware with them, and then re-release it as a free version of the app. Manual Sharing Scams. These rely on victims to actually do the hard work of sharing the scam by presenting them with intriguing videos, fake offers or messages that they share with their friends.
  • 12.
    p. 12 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 DATA BREACHES
  • 13.
    p. 13 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Data Breaches Timeline of Data Breaches, 2013 At a Glance Source: Symantec • The largest breach that was reported in December actually occurred during November, where 40 million identities were exposed. 40 120 105 32 90 24 75 60 16 45 30 NUMBER OF INCIDENTS • Of the reported breaches so far, the top three types of information exposed are a person’s real name, government ID number (e.g. Social Security), and birth date. 135 IDENTITIES BREACHED (MILLIONS) • There were a number of breaches reported during December that occurred earlier in the year. This brings the total number of reported breaches to 215 so far for 2013. 48 150 8 15 D JAN 2013 F M A M J J A S IDENTITIES BREACHED O N D INCIDENTS Top 5 Types of Information Exposed Source: Symantec Information Exposed in Breaches % OF ALL BREACHES Real Names 70% Gov ID numbers (Soc Sec) 40% Birth Dates 40% Home Address 36% Medical Records 31% Methodology This data is procured from the Norton Cybercrime Index (CCI). The Norton CCI is a statistical model that measures the levels of threats, including malicious software, fraud, identity theft, spam, phishing, and social engineering daily. The data breach section of the Norton CCI is derived from data breaches that have been reported by legitimate media sources and have exposed personal information. In some cases a data breach is not publicly reported during the same month the incident occurred, or an adjustment is made in the number of identities reportedly exposed. In these cases, the data in the Norton CCI is updated. This causes fluctuations in the numbers reported for previous months when a new report is released. Norton Cybercrime Index http://us.norton.com/protect-yourself
  • 14.
    p. 14 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 MOBILE
  • 15.
    p. 15 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Mobile At a Glance Mobile Malware by Type Source: Symantec • 33 percent of mobile malware tracks users in 2013, up from 15 percent in 2012. • Traditional threats, such as back doors and downloaders are present in 20 percent of all mobile malware threats. • Risks that collect data, the most common risk in 2012, is down 12 percentage points to 20 percent of risks. • Four new mobile malware families were discovered in December, along with 132 new variants. 33% 21% Track User Adware/Annoyance Risks that spy on the individual using the device, collecting SMS messages or phone call logs, tracking GPS coordinates, recording phone calls, or gathering pictures and video taken with the device. Mobile risks that display advertising or generally perform actions to disrupt the user. 20% 20% Traditional Threats Collect Data Threats that carry out traditional malware functions, such as back doors and downloaders. This includes the collection of both device- and user-specific data, such as device information, configuration data, or banking details. 10% 8% Change Settings Send Content These types of risks attempt to elevate privileges or simply modify various settings within the operating system. These risks will send text messages to premium SMS numbers, ultimately appearing on the bill of the device’s owner. Other risks can be used to send spam messages.
  • 16.
    p. 16 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Cumulative Mobile Android Malware Source: Symantec 9000 320 8000 280 7000 240 6000 200 5000 160 4000 120 3000 80 2000 40 1000 D JAN 2013 F M A M J J A S FAMILIES O N D VARIANTS VARIANTS (CUMULATIVE) 10000 360 FAMILIES (CUMULATIVE) 400
  • 17.
    p. 17 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 VULNERABILITIES
  • 18.
    p. 18 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Vulnerabilities At a Glance Total Vulnerabilities Disclosed by Month Source: Symantec • There were 471 new vulnerabilities discovered in December, bringing the total for the year up to 6436, a 18 percent increase compared to 2012. • There was one vulnerability in mobile operating systems disclosed during the month of December. • Google’s Chrome browser continues to lead in reporting browser vulnerabilities, while Oracle’s Java leads in reported plug-in vulnerabilities. 800 700 600 500 400 300 200 100 D • Two zero-day vulnerabilities were disclosed during the month of December. JAN 2013 F M A M J J A Browser Vulnerabilities O N Plug-in Vulnerabilities Source: Symantec S Source: Symantec 60% Apple Safari Google Chrome Microsoft Internet Explorer Mozilla Firefox Opera Adobe Acrobat Reader Adobe Flash Player Apple QuickTime Oracle Sun Java 60% 50% 50% 40% 40% 30% 30% 20% 20% 10% 10% D
  • 19.
    p. 19 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 SPAM, PHISHING, & MALWARE
  • 20.
    p. 20 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Spam At a Glance Top 5 Activity for Spam Destination by Geography Source: Symantec • The global spam rate increase 1.8 percentage points in December to 64 percent, up from 62.2 percent in November. • Education was the most commonly targeted industry, taking the top spot for the second month in a row. Geography Percent • The .com top-level domain (TLD) was again the most frequently used malicious TLD in December. Sri Lanka 75.2% Israel 71.6% France 71.5% Saudi Arabia 69.2% China 69.1% • Sex Dating spam is the most common category, at 76.3 percent. Pharmaceutical and Job-related spam tied for second at 9.2 percent each. Top 5 Activity for Spam Destination by Industry Source: Symantec Industry Percent Education 65.9% Gov/Public Sector 65.6% Non-Profit 65.4% Chem/Pharm 65.1% IT Services 64.9%
  • 21.
    p. 21 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Top 10 Sources of Spam Top 5 Activity for Spam Destination by Company Size Source: Symantec Source: Symantec Source Percent of All Spam Company Size Percent  Spain 7.6% 1-250 63.7%  United States 7.6% 251-500 64.0%  Finland 6.4% 501-1000 63.7%  Argentina 5.1% 1001-1500 64.1%  Italy 4.9% 1501-2500 63.8%  India 4.1% 2501+ 64.2%  Canada 4.0%  Brazil 3.7%  Peru 3.5%  Romania 3.1% Spam by Category Source: Symantec Category Sex/Dating Month* 0Kb – 5Kb 5Kb – 10Kb >10Kb Nov 37.0% 24.7% 38.4% Oct 40.2% 26.0% 9.2% Jobs Source: Symantec 76.3% Pharma Average Spam Message Size Percent 9.2% Watches 1.8% Software 1.3% 33.8% *Data lags one month Spam URL Distribution Based on Top Level Domain Name Source: Symantec Month* .com .info .us .biz Nov 36.7% 26.1% 10.1% 9.6% Oct 26.1% n/a 11.8% 17.7% *Data lags one month
  • 22.
    p. 22 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Phishing Top 5 Activity for Phishing Destination by Company Size At a Glance Source: Symantec • The global phishing rate is up in December, comprising one in 1 in 1,053 email messages. In November this rate was one in 1 in 1,311. Company Size Rate • Financial themes continue to be the most frequent subject matter, with 61.6 percent of phishing scams containing this theme. 1-250 1 in 862 • The United Kingdom had the highest rate in December, where one in 530 emails was a phishing scam. 251-500 1 in 944 • Australia tops the list of sources of phishing emails, responsible for distributing 35.9 percent of phishing scams. 501-1000 1 in 1,489 • The Public Sector was the most targeted industry in December, with one in every 173 emails received in this industry being a phishing scam. 1001-1500 1 in 1,811 1501-2500 1 in 1,963 2501+ 1 in 2,905 Top 10 Sources of Phishing Top 5 Activity for Phishing Destination by Industry Source: Symantec Source: Symantec Source Percent Industry Rate Australia 35.9% Public Sector 1 in 173 New Zealand 29.3% Finance 1 in 652 United States 18.8% Education 1 in 803 United Kingdom 6.0% Accom/Catering 1 in 834 South Africa 3.5% Marketing/Media 1 in 1,016 Sweden 2.1% Chile 1.3% Netherlands 0.5% Canada 0.3% Malaysia 0.3% Top 5 Activity for Phishing Destination by Geography Source: Symantec Geography Rate United Kingdom 1 in 530 Australia 1 in 734 Mexico 1 in 1,062 New Zealand 1 in 1,073 Italy 1 in 1,096
  • 23.
    p. 23 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Phishing Distribution Organizations Spoofed in Phishing Attacks Source: Symantec Source: Symantec Organizations Spoofed in Phishing Attacks: Phishing Distribution: Automated Toolkits 48.6% Financial Other Unique Domains 43.0% 61.6% Information Services IP Address Domains 4.3% Free Web Hosting Sites 3.3% Typosquatting 0.8% 33.8% Retail 5.2% Computer Software 0.9% Communications 0.5%
  • 24.
    p. 24 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Malware Top 10 Email Virus Sources At a Glance Source: Symantec • The global average virus rate in December was one in 164 emails, compared to one in 253 in November. Geography 14.0% United States 13.9% Australia 2.7% France 0.9% South Africa 0.9% Japan 0.8% Netherlands 0.7% Singapore 0.5% Hong Kong • Small-to-medium size businesses with 1-250 employees were the most targeted company size, where one and 147 emails contained a virus. 60.7% Sri Lanka • The United Kingdom was also the largest source of virus-laden emails, making up 60.7 percent of all email-based viruses. Percent United Kingdom • The United Kingdom topped the list of geographies, with one in 65 emails containing a virus. 0.5% Proportion of Email Traffic in Which Virus Was Detected Source: Symantec 1 in 50 1 in 100 1 in 150 1 in 200 1 in 250 1 in 300 1 in 350 1 in 400 1 in 450 1 in 500 D JAN 2013 F M A M J J A S O N D
  • 25.
    p. 25 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Top 5 Activity for Malware Destination by Industry Top 5 Activity for Malware Destination by Geographic Location Source: Symantec Source: Symantec Industry Rate Geography Rate Public Sector 1 in 33 United Kingdom 1 in 65 Education 1 in 76 Switzerland 1 in 128 Accom/Catering 1 in 122 Austria 1 in 200 Recreation 1 in 150 Ireland 1 in 201 Prof Services 1 in 151 Hungary 1 in 256 Top 5 Activity for Malware Destination by Company Size Source: Symantec Company Size Rate 1-250 1 in 147 251-500 1 in 150 501-1000 1 in 167 1001-1500 1 in 183 1501-2500 1 in 213 2501+ 1 in 324
  • 26.
    p. 26 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Endpoint Security At a Glance Top 10 Most Frequently Blocked Malware Source: Symantec • Variants of W32.Ramnit accounted for 8.1 percent of all malware blocked at the endpoint. • In comparison, 4.3 percent of all malware were variants of W32.Sality. • Approximately 30.1 percent of the most frequently blocked malware last month was identified and blocked using generic detection. Malware Percent W32.Sality.AE 5.7% W32.Ramnit!html 4.8% W32.Ramnit.B 4.1% W32.Almanahe.B!inf 3.6% W32.Downadup.B 3.5% W32.Ramnit.B!inf 2.9% Trojan.Zbot 2.5% W32.Virut.CF 1.9% W32.SillyFDC 1.5% W32.Mabezat.B!inf 1.0%
  • 27.
    p. 27 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 Policy Based Filtering At a Glance Policy Based Filtering Source: Symantec • The most common trigger for policy-based filtering applied by Symantec Web Security .cloud for its business clients was for the “Social Networking” category, which accounted for 50.8 percent of blocked Web activity in December. • “Advertisement & Popups” was the second-most common trigger, comprising 21.1 percent of blocked Web activity. Category Percent Social Networking 50.8% Advertisement & Popups 21.1% Streaming Media 4.9% Hosting Sites 3.6% Computing & Internet 3.4% Search 1.8% Chat 1.6% Gambling 1.3% News 1.1% Entertainment 1.0%
  • 28.
    p. 28 Symantec Corporation SymantecIntelligence Report :: DECEMBER 2013 About Symantec Symantec protects the world’s information and is a global leader in security, backup, and availability solutions. Our innovative products and services protect people and information in any environment—from the smallest mobile device to the enterprise data center to cloudbased systems. Our world-renowned expertise in protecting data, identities, and interactions gives our customers confidence in a connected world. More information is available at www.symantec.com or by connecting with Symantec at go.symantec.com/socialmedia. More Information •  Security Response Publications: http://www.symantec.com/security_response/publications/ •  Internet Security Threat Report Resource Page: http://www.symantec.com/threatreport/ •  Symantec Security Response: http://www.symantec.com/security_response/ •  Norton Threat Explorer: http://us.norton.com/security_response/threatexplorer/ •  Norton Cybercrime Index: http://us.norton.com/cybercrimeindex/
  • 29.
    Confidence in aconnected world. For specific country offices and contact numbers, please visit our website. For product information in the U.S., call toll-free 1 (800) 745 6054. Symantec Corporation World Headquarters 350 Ellis Street Mountain View, CA 94043 USA +1 (650) 527 8000 1 (800) 721 3934 www.symantec.com Copyright © 2014 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, and the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.