Cybercriminals are becoming more business savvy in their efforts to profit by worming into business networks to steal passwords and other sensitive data, according to a recent security survey from Cisco [1]. In this report [2] from colleague Tim Greene, he explains that the Cisco survey finds crackers selling their malware start-up kits online are hiring quality-assurance testers for their malicious code, as well as botnets for quick distribution.
The evil doers are also profiting by selling start-up kits to other cybercriminals. A Zeus Trojan [3] kit for stealing login data is available for $700, Greene reports.
The efforts are as impressive as they are dastardly: Cisco for the first time is passing out awards for the most prolific infections. The Most Audacious Criminal Operation honor went to Zeus, which has infected an estimated 4 million machines and includes a versatile botnet that could be used for a variety of attacks.
The Most Notable Criminal Innovation is Koobface [4], Greene reports, a worm that lures users to a YouTube video that encourages Flash player updates. The updates they download are actually the worm that gathers sensitive information from infected machines.
Koobface is an example of a worm that exploits social network sites, which account for 2% of workplace Web traffic, the Cisco survey states. So beware the social networker at work...
More from Cisco Subnet:
- Cisco rival Brocade for sale? [5]
- HP blade counters Cisco security approach [6]
- What's next for Cisco after Tandberg deal? [7]
- Manly Man IOS Features [8]
- Cisco Releases IOS 15.0 [9]
- Cisco training and network design books up for grabs in October [10]
Win great stuff from Cisco Subnet [11] Like e-mail? Subscribe to the Cisco Alert newsletter. [12]
Like RSS readers? Subscribe to the Cisco Subnet RSS feed [13]Follow all Cisco Subnet bloggers on Twitter [14].
Follow Jim Duffy on Twitter [15]
Links:
[1] http://cisco.com/en/US/prod/vpndevc/annual_security_report.html
[2] http://www.networkworld.com/news/2009/120809-cisco-cybercrime-survey.html
[3] http://www.networkworld.com/news/2009/111809-uk-police-reveal-arrests-over.html
[4] http://www.networkworld.com/news/2009/081209-twitter-users-targeted-by-koobface.html
[5] http://www.networkworld.com/community/node/45912
[6] http://www.networkworld.com/community/node/45910
[7] http://www.networkworld.com/community/node/45865
[8] http://www.networkworld.com/community/node/45917
[9] http://www.networkworld.com/community/node/45883
[10] http://www.networkworld.com/community/node/45798
[11] http://www.networkworld.com/subnets/cisco/
[12] http://www.networkworld.com/nl/nl_subscribe.jsp?k=NLHP09C&mo=re
[13] http://www.networkworld.com/community/blogs/cisco/feed
[14] http://twitter.com/ciscosubnet
[15] http://twitter.com/jim_duffy