Sydney - February 14 2013 - Research findings released today from Websense® Security Labs™, the worldwide research team from Websense, Inc.(NASDAQ: WBSN), report explosive year-over-year growth in global cyberattack trends.
“Year-over-year, the number of malicious web-based attacks increased by nearly 600 percent,” said Charles Renert, vice president of the Websense Security Labs. “These attacks were staged predominantly on legitimate sites and challenge traditional approaches to security and trust. The timed, targeted nature of these advanced threats indicates a new breed of sophisticated attacker who is intent on compromising increasingly higher-yield targets. Only proactive, real-time security techniques, that inspect the entire lifecycle of a threat, can withstand the assault and prevent data theft.”
Below are key Websense 2013 Threat Report findings, based on a year-over-year comparison of web, email, data, mobile and social media threats: · Each week, organisations faced an average of 1,719 attacks for every 1,000 users.
· Malicious websites increased by nearly 600 percent worldwide.
· North American malicious sites increased by 720 percent and EMEA saw a 531 percent increase.
· Legitimate web hosts were home to 85 percent of those malicious sites.
· Half of web-connected malware downloaded additional executables in the first 60 seconds.
· Only 7.7 percent of malware interacted with the system registry - circumventing many behavioural detection systems and antivirus solutions.
· 32 percent of malicious links in social media used shortened URLs. Once cybercriminals gain access to a host they typically hide their own malicious pages deep in the directory tree - a process that generates very long and complex web links that might tip off a wary user. Link shortening solves that problem.
· The United States of America, Russia and Germany were the top three countries hosting malware. Meanwhile, the Bahamas made its debut into the list of top five countries hosting phishing sites with a second place ranking.
· China, the United States of America and Russia were the top three countries hosting command and control servers.
· Only one in five emails were legitimate and email spam increased to 76 percent. Worldwide spam volumes reached more than a quarter of a million emails per hour.
· One in 10 malicious mobile applications asked for permission to install other apps, something rarely required by legitimate apps.
Analysis and news headlines show that multistage attacks with multiple vectors have challenged security capabilities as they worked to find weak spots and circumvent defences. Attacks identified in the Websense 2013 Threat Report indicate a need for integration at the actual defence level and deep content security intelligence with real-time security defences. When independent solutions are in place, there is no way to ensure that email, web, mobile, social and data loss defences are each prepared to perform their role to cohesively address an emerging threat. As a result, individual defences are at the mercy of the least prepared security solution.
Real-time security defences and shared intelligence serves as the backbone for the award-winning Websense TRITON™ architecture. Websense TRITON unifies all the key components of threat protection and data theft prevention into a cohesive content security system. It brings together web security, email security, mobile security and data loss prevention (DLP) defences with unified security intelligence and a unified management console. This intelligence is derived from more than 100 Websense Security Labs researchers worldwide, managing more than 10,000 analytics from analysis of up to five billion requests per day.
To download the Websense 2013 Threat Report, please visit www.websense.com/2013threatreport
For ongoing research updates, be sure to follow the Websense Security Labs blog: http://community.websense.com/blogs/securitylabs/
For more information about Websense TRITON solutions, please visit www.websense.com/triton .
About Websense, Inc.
Websense, Inc. (NASDAQ: WBSN), a global leader in unified web security, email security, mobile security, and data loss prevention (DLP), delivers the best content security for modern threats at the lowest total cost of ownership to tens of thousands of enterprise, mid-market and small organisations around the world. Distributed through a global network of channel partners and delivered as appliance-based software or SaaS-based cloud services, Websense TRITON content security solutions help organisations leverage social media and cloud-based communication, while protecting from advanced persistent threats and modern malware, preventing the loss of confidential information, and enforcing internet use and security policies. Websense is headquartered in San Diego, California with offices around the world. For more information, visit www.websense.com.
Follow Websense on Twitter: www.twitter.com/websense
Join the discussion on Facebook: www.facebook.com/websense
Speakers: - Paul O’Connor, Engagement leader - Performance Audit Group, Victorian Auditor-General’s Office (VAGO) - Nigel Phair, Managing Director, Centre for Internet Safety - Joshua Stenhouse, Technical Evangelist, Zerto - Anthony Caruana, CSO MC & Moderator
Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint
Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.
Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation
CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)