Mobile banking apps a risk for security
Alongside macro and fileless malware, mobile banking poses the biggest risk in 2016
McAfee Labs has revealed the biggest threats to security this year and into next, claiming mobile banking apps, macro and fileless malware are most prevalent.
The company released the information in its newly-released November 2015 Threats Report, which identified the biggest threats to security in the third quarter of 2015.
"The cyber threat landscape often combines something old, something new, something blundered, and something you'," Vincent Weafer, vice president of Intel Security's McAfee Labs, said in a blog post. "The third quarter provides examples of old threats repackaged with social engineering, new fileless malware replacing rootkits, mobile app coding blunders, and the exploit of the weakest link in any ecosystem: you the user."
Researchers at the lab explored mobile threats, saying poor mobile app practices, such as disregarding back-end service provider guidance, means user data is exposed to services in the cloud. Mobile banking apps are particularly targeted here, which is even more concerning considering the sensitivity of the data such apps generate.
"A two-month analysis of nearly 300,000 mobile apps led McAfee Labs to the discovery of two mobile banking Trojans responsible for taking advantage of thousands of mobile banking accounts across Eastern Europe," Weafer explained.
"Known to the industry as 'Android/OpFake' and 'Android/Marry', the two malware strains were designed to take advantage of poor mobile app coding connecting mobile apps to back-end service providers managing app data."
McAfee's report also revealed macro malware has reached a six-year high, with incidents increasing four-fold in comparison to last year. The reason such threats have risen is because spearphishing campaigns are becoming more sophisticated, targeting enterprise users and encouraging them to download attachments containing such vulnerabilities.
Fileless malware should be a priority for IT managers to tackle. McAfee Labs said it captured 74,471 samples of fileless attacks in the first three quarters of 2015
Additional threats exposed in McAfee's report relate to mobile malware, which increase by 16 per cent over the last quarter, Mac OS malware, which quadrupled over the period and ransomware, which grew 18 per cent.
The good news is that rootkit-related attacks waned in popularity, dropping 65 per cent, while malicious signed binaries also declined.
-
SecurityHQ names Aaron Hambleton as product and services chiefNews Industry veteran will lead product and service innovation across the provider's cybersecurity portfolio
-
Cisco teams up with DSIT to drive digital skills adoptionNews Partnership supports the government's TechFirst program to provide one million secondary school students with access to digital learning experiences
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
