A distributed denial-of-service attack that disrupted Web-based systems at credit card payment processing firm Authorize.Net earlier this week is indicative of a sharp increase in the number of cyberattacks being targeted at specific companies and driven by profit motives on the part of the hackers who launch them.

The DDoS attack against Authorize.Net coincided with the release of a report by IT security software vendor Symantec Corp., which said its analysis of network attacks in the first six months of this year shows that malicious hackers appear to be moving away from mass attacks to more focused ones aimed at e-commerce sites.

Other security vendors and analysts painted a similar picture.

"We're seeing a big escalation of attacks targeted at e-commerce companies," said Tom Corn, a vice president at Mazu Networks Inc., a Cambridge, Mass.-based vendor of DDoS-mitigation technologies. Many of the attacks involve attempts to extort money from the targeted companies, he said.

The plight of Bellevue, Wash.-based Authorize.Net was a perfect example. The company, which provides payment processing services to more than 100,000 mainly small to midsize online businesses, was the target of intermittent but "large-scale" DDoS attacks that began on Sept. 15, said Authorize.Net's marketing director, David Schwartz. The attacks resulted in periods of "brief disruptions" for Authorize.Net's customers, said Schwartz.

The attacks were launched a few days after company officials refused to give in to an extortionist's demand for "a substantial amount of money," Schwartz said. "It was something that was sent to our general mailbox," he said, adding that the FBI and other law enforcement authorities are investigating the incident.

This isn't the first time Authorize.Net has been targeted by cyberattackers, but the scope is bigger. "We have been attacked in the past, but not on this scale and with such tenacity," Schwartz said.

Jonah Paransky, a senior manager at Cupertino, Calif.-based Symantec, said 16 percent of the attacks against e-commerce sites that the company analyzed were targeted. In the same period last year, just 4 percent of the attacks on e-commerce sites were thought to be aimed at specific sites. The increase suggests "that attackers are turning to where the money is," Paransky said.

For more enterprise computing news, visit Computerworld. Story copyright Computerworld, Inc.

Whitepapers

• The Trend from UNIX to Linux in SAP(r) Data Centers
• Getting in Compliance With Government Data Regulations By Leveraging Online Security Technology
• How to Offer the Strongest SSL Encryption
• Maximizing Site Visitor Trust Using Extended Validation SSL
• Seven Steps to Reducing your Security Risk
• The Latest Advancements in SSL Technology

View more SECURITY whitepapers

Webcasts

• The Secure Web Gateway. Mission Critical For Business - Webcast
• Mobile Data Security
• Best Practices for Deploying WAN Optimization for Disaster Recovery
• Solutions to the Toughest IT Challenges in Remote Offices
• Lowering the Cost of Email Archives
• High Availability for SQL Server 2005 Using Array-Based Replication and Host-Based Mirroring Technologies

View more SECURITY webcasts

Special Reports

• The Evolution of Network Security
• Taking Virtualization Up a Notch
• The self-managed network

View more SECURITY special reports