Cyber attacks hit businesses once every three minutes

5 April 2013
By Sofia Mitra-Thakur
Mobile version
Share |
On average, companies experience a malware event once every three minutes

On average, companies experience a malware event once every three minutes

Companies experience cyber attacks up to once every three minutes, a report says.

The report by security vendor FireEye shows that malware activity has become so pervasive that organisations experience a malicious email file attachment or web link as well as malware communication that slips through legacy defences up to once every three minutes.

The Advanced Threat Report gathered data from 89 million malware events and direct intelligence to provide a global look into cyber attacks including evolving advanced persistent threat (APT) tactics that routinely bypass traditional defences such as firewalls, next-generation firewalls, IPS, anti-virus, and security gateways.

“This report provides an overview of how attacks have become much more advanced and successful at penetrating networks, regardless of industry,” said Ashar Aziz, FireEye founder and CTO.

“As cybercriminals invest more in advanced malware and innovations to better evade detection, enterprises must rethink their security infrastructure and reinforce their traditional defences with a new layer of security that is able to detect these dynamic, unknown threats in real time.”

Key findings in the Advanced Threat Report include:

- On average, enterprises experience a malware event up to once every three minutes.

- Across industries, the rate of malware activity varies, with technology companies experiencing the highest volume with up to one event per minute. Some industries are attacked cyclically, while some verticals experience attacks erratically.

- Spear phishing remains the most common method for initiating advanced malware campaigns.

- When sending spear phishing emails, attackers opt for file names with common business terms to lure unsuspecting users into opening the malware and initiating the attack. 

These terms fall into three general categories: shipping and delivery, finance, and general business. The top term in malware file names, for example, was “UPS”.

- ZIP files remain the preferred file of choice for malware delivery. Malicious malware is delivered in ZIP file format in 92 per cent of attacks.

- Several innovations have appeared to better evade detection. 

Instances of malware are uncovered that execute only when users move a mouse, a tactic which could dupe current sandbox detection systems since the malware doesn’t generate any activity.

 In addition, malware writers have also incorporated virtual machine detection to bypass sandboxing.

- Attackers are increasingly using DLL files. By avoiding the more common .exe file type, attackers leverage DLL files to prolong infections.

“The high rate at which cyber attacks are happening illustrates the allure of malware,” said Zheng Bu, senior director of research.

“Today, malware writers spend enormous effort on developing evasion techniques that bypass legacy security systems. 

"Unless enterprises take steps to modernise their security strategy, most organisations are sitting ducks.”

Further information:

Read FireEye's Advanced Threat Report

Latest Issue

E&T cover image 1605

"We visit Barcelona, one of the smartest cities in the world, to find out what makes it so special. What does it look like and what is the future?"

E&T jobs

  • Senior Development Engineer, Electronics

    Premium job

    Helmet Integrated Systems / Gentex Corporation
    • Letchworth Garden City, Hertfordshire
    • Competitive

    We are an innovative, robust and fast growing business, whose main focus is to deliver continues improvement to existing products and offer new sol..

    • Recruiter: Helmet Integrated Systems / Gentex Corporation

    Apply for this job

  • Smart Grid Research Engineer

    Premium job

    University of Strathclyde
    • Cumbernauld, Glasgow
    • Grade: 6/7* £26,537 - £37,768*

    Work as part of a growing dynamic team on a wide range of technical projects with particular emphasis on experimental validation and testing

    • Recruiter: University of Strathclyde

    Apply for this job

  • Electrical Asset Specialist

    Affinity Water
    • Hatfield, Hertfordshire

    Responsible for updating and writing electrical engineering standards, approved codes of practice and safe systems of work

    • Recruiter: Affinity Water

    Apply for this job

  • Senior Electronics Engineer

    York Instruments
    • York, North Yorkshire

    Senior electronics engineer to work as part of a team developing an MEG imaging system; working with the engineering team and external contractors.

    • Recruiter: York Instruments

    Apply for this job

  • Manufacturing Engineer - Circuit Card Assembly

    MBDA
    • Lostock Junction
    • Competitive Salary & Benefits

    What’s the opportunity?   Manufacturing UK is an integral part of the Operations Directorate whose principal mission is to ensure that MBDA’s deliverable commitments are met...

    • Recruiter: MBDA

    Apply for this job

  • High Voltage Engineer

    Premium job

    Essex X-Ray & Medical Equipment
    • Great Dunmow, Essex

    This High Voltage Engineer will provide design leadership for high voltage cable assemblies up to one megavolt.

    • Recruiter: Essex X-Ray & Medical Equipment

    Apply for this job

  • Team Leader - Flank Arrays

    BAE Systems
    • Barrow-In-Furness, Cumbria, England
    • Negotiable

    Team Leader - Flank Arrays Would you like to work in a unique role within the construction of the Astute Class submarines? We currently have a vacancy for a Team Leader - Flank Arrays at our site in Barrow-in-Furness. As a Team Leader - Flank Arrays, you

    • Recruiter: BAE Systems

    Apply for this job

  • Electronics and Software Engineer

    Copley Scientific Ltd
    • Nottingham
    • circa £35,000 per annum + bonus

    Develop new test equipment for the pharmaceutical industry. Good opportunities to grow and develop. Successful family-owned and managed business.

    • Recruiter: Copley Scientific Ltd

    Apply for this job

  • Bridge Test Facility Manager

    BAE Systems
    • Shropshire, Telford, England
    • Negotiable

    Bridge Test Facility ManagerWe currently have a vacancy for a Bridge Test Facility Manager at our site in Telford with our Land UK business.As the Bridge Test Facility Manager, you will be part of our Test & Trials team, working closely with the Mili

    • Recruiter: BAE Systems

    Apply for this job

  • Intelligent Transport Systems Engineer - Highways Technology

    Premium job

    Mott MacDonald
    • Birmingham, West Midlands

    Our transport technology team in Birmingham is currently growing a highly skilled and customer-focused team to...

    • Recruiter: Mott MacDonald

    Apply for this job

More jobs ▶

Subscribe

Choose the way you would like to access the latest news and developments in your field.

Subscribe to E&T