Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Cybercriminals Change Strategy: Phishing Dips, Zeus Rises

The second quarter Phishing Trends Report from Internet security provider IID  (Internet Identity) indicates that there has been a significant switch in the tactics of cyber criminals, with at least one major gang shifting its entire focus away from phishing to Zeus malware, often referred to as man-in-the-browser malware.

Cybercrime Trends

The second quarter Phishing Trends Report from Internet security provider IID  (Internet Identity) indicates that there has been a significant switch in the tactics of cyber criminals, with at least one major gang shifting its entire focus away from phishing to Zeus malware, often referred to as man-in-the-browser malware.

Cybercrime Trends

IID deduces this shift based on data contributed by security and Internet infrastructure organizations like ICANN and APWG, and from the fact that phishing from Avalanche, a notorious gang which was at one time responsible for two-thirds of all phishing attacks, has fallen off to zero. Phishing from non-Avalanche sources is up 12 percent, partly making up for the gang’s demise, but year-to-year phishing instances are still down 10 percent.

The rise of Zeus is an alarming development, as Zeus is particularly resistant to detection. According to a recent study by Trusteer involving 10,000 computers, 55 percent could not find and remove Zeus, even though they were equipped with the latest updates of their security and antivirus software.

Other highlights from the new IID report:

• Traditional bank phishing now comprises about 50 percent of overall phishing, down from almost 60 percent in Q2 2009.

• The U.S. remained in the top spot for overall phish hosting volume, while Canada jumped from seventh to second.

• Domain Name System (DNS) hijackings continued to proliferate. Several major brands were taken over in Israel.

In spite of a small dip in phishing, IID President and CTO Rod Rasmussen warns, “It’s imperative that organizations keep their phishing guard up in the coming months, because we’ve seen plenty of new phishing campaigns launched against an even wider range of target organizations.”

Advertisement. Scroll to continue reading.
Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

Expert Insights

Related Content

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.