Symantec today (27 November 2007) released its report on security trends in 2007 which listed the top three dominant security issues as:
- Data leakage
- Microsoft Windows Vista
- Spam
Data breaches topped the Symantec list because the
series of high profile breaches raised the importance of data loss prevention technologies and strategies throughout the year.
As we know only too well, in light of the recent Child Benefit farago, even Government departments fall prey to data leaks.
Next, came
Microsoft Vista. The additional Vista security features required 16 patches not long after its debut, said Symantec. Moreover, it is far less comprehensive than the claims made for it by Microsoft suggest. At best, it offer basic level security, but no more than you would expect from an adequate Operating System. In short, it is nothing remarkable. We advise you to invest in proper security software to ensure that you are safe online.
Spam established a new record in 2007. PDF spam emerged as a new annoyance. Greeting-card spam was also responsible for delivering Storm Worm malware.
Symantec expects to see spam continue to evolve in order to evade traditional blocking systems and to trick users into reading messages. Image spam was big earlier in 2007, PDF spam and different kinds of attachments were the next trend as spammers attempted to get past spam filters.
Now Symantec anticipate seeing attachments like MP3 and flash as well as spam that takes advantage of popular fads and social networking sites.
Phishing followed with an 18 percent increase across 2007. Phishing attacks work by online criminsla creating fake websites that look and feel like a real and trusted bank or shopping site. You can
see an example of how we foiled a phishing attack, masquerading as the
Halifax banking website.
Attackers are exploiting trusted entities like banks and well known retailers. Applications from social networking sites are also likely targets. You can go to a reputable organisations website that you have been to many times before, only to find that you have had your identity stolen. Worse, a friend could recommend an application from Facebook to you that may be riddled with malware or which might be a phishing attack.
Anybody that goes to a fake website designed by phishers to look and feel like the real thing becomes affected - without clicking or rolling the mouse over anything.