The document appears to be a report on internet security threats in 2019. It discusses the rise of cryptojacking malware infecting apps on the Microsoft Store and notes that cryptojacking was patched in April 2018. It also discusses a supply chain attack on Ticketmaster that resulted in formjacking. The report examines the underground economy fueled by criminal hacking and estimates underground cybercrime profits to be over $1.5 billion for 2018 alone. It provides statistics on stolen credit card numbers and estimates criminals could earn over $2.2 million per month selling access to stolen credit cards on just 10 websites.

1. 2019 Internet Security Threat
Report (ISTR):
The New Threat Landscape

5. 5

7. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019

8. 8

10. 10

11. 11

12. 12

13. 13

14. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
14

15. 15ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
↓
↓

18. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
Source: https://www.symantec.com/blogs/threat-intelligence/cryptojacking-apps-microsoft-store

24. Patched in April 2018

26. 26

27. 27

28. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
28

29. 29

30. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
30

31. The high-profile Ticketmaster
formjacking breach was the
result of a supply chain attack
31

32. o
o
o
o
32

33. 33
o
o
o
o
No
Binary
Malware
Used

34. 34ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019

35. o
o
o
o
o
o
35

36. 36

37. 37

38. 38

39. o
o
John_Doe@acmeorg.com
Urgent Document To Review
Mr. Doe,
It is urgent for you to review his document.
Important_Person@reseahco.com
39

40. o
o
o
o
o
o
o
o
40

41. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
41

42. o
o
o
o
42

43. 43

44. OptionsMessage
To:
From:
Subject:
I’veBeen WatchingYou
kevin@company.com
BobbyXY49875@hotmail.com
I’ve Been WatchingYou
I know your password is….
adult web site that you visited
I place malwareon an
web cam (its you doing dirty things)
I captured video from your
Pay me $3200
Or your familyand friends will see the video

45. 2015
2016
2017
2018
1 out of 1,846 2,596 2,995 3,207
UNDERGROUNDECONOMY

46. ISTR | INTERNET SECURITY THREAT REPORT | Volume 24 | February 2019
46

48. 2012

49. 49

50. 50

51. 51

52. o
0
100,000
200,000
300,000
400,000
500,000
600,000
700,000
Jan-18 Feb-18 Mar-18 Apr-18 May-18 Jun-18 Jul-18 Aug-18 Sep-18 Oct-18 Nov-18 Dec-18
o
52

53. 53

54. o
- single creditcard = $45
- 10 credit cardsx 5000 websites= $2.2 million a month
o The British Airways attack alone may haveallowed criminals to earn more than $17 million
54

55. 55

56. 56

57. 57

58. Questions ?