2012 Cyber Security Predictions from the Websense Security Labs
Announcement posted by Websense Australia 18 Nov 2011
Websense predicts cybercriminals will use cyber-antics during the U.S. presidential election and will turn cell phones into ATMs
November 17, 2011 - With all of the crazy 2011 security breaches, exploits and notorious hacks, what can we expect for 2012? We asked the top researchers of the Websense Security Labs™ to take a few minutes and provide their top predictions for the coming year. Last year’s Websense Security Labs predictions were very accurate <http://community.websense.com/blogs/websense-insights/archive/2011/11/15/a-look-back-a-websense-security-labs-2011-security-predictions-scorecard.aspx?cmpid=prnr11.11.17> , so these predictions should provide very useful guidance for security professionals.
Here are the highlights; the full report can be downloaded here <http://www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf?cmpid=prnr11.11.17> .
1. Your social media identity may prove more valuable to cybercriminals than your credit cards. Bad guys will actively buy and sell social media credentials in online forums.
Trust is the basis of social networking, so if a bad guy compromises your social media log-ins, there is a good chance they can manipulate your friends. Which leads us to prediction #2.
2. The primary blended attack method used in the most advanced attacks will be to go through your social media “friends,” mobile devices and through the cloud.
We’ve already seen one APT attack that used the chat functionality of a compromised social network account to get to the right user. Expect this to be the primary vector, along with mobile and cloud exploits, in the most persistent and advanced attacks of 2012
3. 1,000+ different mobile device attacks coming to a smartphone or tablet near you.
People have been predicting this for years, but in 2011 it actually started to happen. And watch out: the number of people who fall victim to believable social engineering scams will go through the roof if the bad guys find a way to use mobile location-based services to design hyperspecific geolocation social engineering attempts.
4. SSL/TLS will put net traffic into a corporate IT blind spot.
Two items are increasing traffic over SSL/TLS secure tunnels for privacy and protection. First is the disruptive growth of mobile and tablet devices. And second, many of the largest, most commonly used websites, like Google, Facebook, and Twitter are switching to https sessions by default, ostensibly a more secure transmission. But as more traffic moves through encrypted tunnels, many traditional enterprise security defences are going to be left looking for a threat needle in a haystack, since they cannot inspect the encoded traffic.
5. Containment is the new prevention.
For years, security defences have focused on keeping cybercrime and malware out. Organisations on the leading edge will implement outbound inspection and will focus on adapting prevention technologies to be more about containment, severing communications, and data loss mitigation after an initial infection.
6. The London Olympics, U.S. presidential elections, Mayan calendar, and apocalyptic predictions will lead to broad attacks by criminals.
Cybercriminals will continue to take advantage of today’s 24-hour, up-to-the minute news cycle, only now they will infect users where they are less suspicious: sites designed to look like legitimate news services, Twitter feeds, Facebook posts/emails, LinkedIn updates, YouTube video comments, and forum conversations.
7. Social engineering and rogue anti-virus will continue to reign.
Scareware tactics and the use of rogue anti-virus, which decreased a bit in 2011, will stage a comeback. Except, instead of seeing “You have been infected” pages, we anticipate three areas will emerge as growing scareware subcategories in 2012: a growth in fake registry clean-up, fake speed improvement software, and fake back-up software mimicking popular personal cloud backup systems.
Dan Hubbard, chief technology officer, Websense, said, “2011 proved that in the world of enterprise security, anything and everything goes. This year, as broader adoption of mobile, social and cloud technologies explodes, we will see the bad guys move rapidly to take advantage of this shift.
One thing we do know from the explosion of breaches, amplification of advanced malware, and propagation of exploit kits is that the common factor here is very simply, the web. Almost all of the major attacks of 2011 employed a web component, whether as a vector, command-and-control centre, or the pipeline for stolen data and critical IP. Web attacks are going beyond the browser, and as the number of API web requests gains momentum we will see attackers using the APIs for their own malicious exploitation.
The most advanced criminals are going to ride the waves of personal devices, personal social media use, and personal web activities of employees to create more advanced, social engineering attacks to get in. Many of the business and government attacks in the coming year won’t necessarily be about how complex the code is, but how well they can convincingly lure unsuspecting victims to click.”
Websense Links
Read the 2012 Websense Security Labs predictions here: www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf <http://www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf?cmpid=prnr11.11.17>
Watch a video <http://www.youtube.com/watch?v=OC4NQA2QUvM> of the Websense Security Labs discussing the predictions.
Click to share <http://www.facebook.com/sharer.php?u=http://www.facebook.com/sharer.php?u=http://ow.ly/7vOeR> 2012 Websense Security Labs predictions on Facebook.
Click to share the video on Twitter <http://twitter.com/home?status=Black%20market%20social%20media%20log-ins?%20The%20Mayan%20calendar?%20SSL%20Blind%20spots?%20Ah%E2%80%A6%20@websenselabs%202012%20predictions%20http://ow.ly/7vO6K> :
Black market social media log-ins? The Mayan calendar? SSL Blind spots? Ah… @websenselabs 2012 predictions http://ow.ly/7vO6K
To learn more about how Websense protects customers from tomorrow’s threats, please read about the revolutionary Websense TRITON™ solution <http://www.websense.com/content/TRITON-solutions.aspx?cmpid=prnr11.11.17> , which offers complementary web security, email security, and data loss prevention.
Facebook: “Like” Websense <http://www.facebook.com/websense> .
Twitter: Follow @Websense.
About Websense, Inc.
Websense, Inc. (NASDAQ: WBSN), a global leader in unified web security, email security, and data loss prevention (DLP) solutions, delivers the best content security for modern threats at the lowest total cost of ownership to tens of thousands of enterprise, mid-market and small organisations around the world. Distributed through a global network of channel partners and delivered as appliance-based software or Security-as-a-Service (SaaS), Websense content security solutions help organisations leverage web 2.0 and cloud-based communication, collaboration, and social media, while protecting from advanced persistent threats and modern malware, preventing the loss of confidential information, and enforcing internet use and security policies. Websense is headquartered in San Diego, California with offices around the world. For more information, visit www.websense.com.
Follow Websense on Twitter: www.twitter.com/websense <http://www.twitter.com/websense>
Join the discussion on Facebook: www.facebook.com/websense
Here are the highlights; the full report can be downloaded here <http://www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf?cmpid=prnr11.11.17> .
1. Your social media identity may prove more valuable to cybercriminals than your credit cards. Bad guys will actively buy and sell social media credentials in online forums.
Trust is the basis of social networking, so if a bad guy compromises your social media log-ins, there is a good chance they can manipulate your friends. Which leads us to prediction #2.
2. The primary blended attack method used in the most advanced attacks will be to go through your social media “friends,” mobile devices and through the cloud.
We’ve already seen one APT attack that used the chat functionality of a compromised social network account to get to the right user. Expect this to be the primary vector, along with mobile and cloud exploits, in the most persistent and advanced attacks of 2012
3. 1,000+ different mobile device attacks coming to a smartphone or tablet near you.
People have been predicting this for years, but in 2011 it actually started to happen. And watch out: the number of people who fall victim to believable social engineering scams will go through the roof if the bad guys find a way to use mobile location-based services to design hyperspecific geolocation social engineering attempts.
4. SSL/TLS will put net traffic into a corporate IT blind spot.
Two items are increasing traffic over SSL/TLS secure tunnels for privacy and protection. First is the disruptive growth of mobile and tablet devices. And second, many of the largest, most commonly used websites, like Google, Facebook, and Twitter are switching to https sessions by default, ostensibly a more secure transmission. But as more traffic moves through encrypted tunnels, many traditional enterprise security defences are going to be left looking for a threat needle in a haystack, since they cannot inspect the encoded traffic.
5. Containment is the new prevention.
For years, security defences have focused on keeping cybercrime and malware out. Organisations on the leading edge will implement outbound inspection and will focus on adapting prevention technologies to be more about containment, severing communications, and data loss mitigation after an initial infection.
6. The London Olympics, U.S. presidential elections, Mayan calendar, and apocalyptic predictions will lead to broad attacks by criminals.
Cybercriminals will continue to take advantage of today’s 24-hour, up-to-the minute news cycle, only now they will infect users where they are less suspicious: sites designed to look like legitimate news services, Twitter feeds, Facebook posts/emails, LinkedIn updates, YouTube video comments, and forum conversations.
7. Social engineering and rogue anti-virus will continue to reign.
Scareware tactics and the use of rogue anti-virus, which decreased a bit in 2011, will stage a comeback. Except, instead of seeing “You have been infected” pages, we anticipate three areas will emerge as growing scareware subcategories in 2012: a growth in fake registry clean-up, fake speed improvement software, and fake back-up software mimicking popular personal cloud backup systems.
Dan Hubbard, chief technology officer, Websense, said, “2011 proved that in the world of enterprise security, anything and everything goes. This year, as broader adoption of mobile, social and cloud technologies explodes, we will see the bad guys move rapidly to take advantage of this shift.
One thing we do know from the explosion of breaches, amplification of advanced malware, and propagation of exploit kits is that the common factor here is very simply, the web. Almost all of the major attacks of 2011 employed a web component, whether as a vector, command-and-control centre, or the pipeline for stolen data and critical IP. Web attacks are going beyond the browser, and as the number of API web requests gains momentum we will see attackers using the APIs for their own malicious exploitation.
The most advanced criminals are going to ride the waves of personal devices, personal social media use, and personal web activities of employees to create more advanced, social engineering attacks to get in. Many of the business and government attacks in the coming year won’t necessarily be about how complex the code is, but how well they can convincingly lure unsuspecting victims to click.”
Websense Links
Read the 2012 Websense Security Labs predictions here: www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf <http://www.websense.com/assets/reports/2012-Predictions-WS-Security-Labs.pdf?cmpid=prnr11.11.17>
Watch a video <http://www.youtube.com/watch?v=OC4NQA2QUvM> of the Websense Security Labs discussing the predictions.
Click to share <http://www.facebook.com/sharer.php?u=http://www.facebook.com/sharer.php?u=http://ow.ly/7vOeR> 2012 Websense Security Labs predictions on Facebook.
Click to share the video on Twitter <http://twitter.com/home?status=Black%20market%20social%20media%20log-ins?%20The%20Mayan%20calendar?%20SSL%20Blind%20spots?%20Ah%E2%80%A6%20@websenselabs%202012%20predictions%20http://ow.ly/7vO6K> :
Black market social media log-ins? The Mayan calendar? SSL Blind spots? Ah… @websenselabs 2012 predictions http://ow.ly/7vO6K
To learn more about how Websense protects customers from tomorrow’s threats, please read about the revolutionary Websense TRITON™ solution <http://www.websense.com/content/TRITON-solutions.aspx?cmpid=prnr11.11.17> , which offers complementary web security, email security, and data loss prevention.
Facebook: “Like” Websense <http://www.facebook.com/websense> .
Twitter: Follow @Websense.
About Websense, Inc.
Websense, Inc. (NASDAQ: WBSN), a global leader in unified web security, email security, and data loss prevention (DLP) solutions, delivers the best content security for modern threats at the lowest total cost of ownership to tens of thousands of enterprise, mid-market and small organisations around the world. Distributed through a global network of channel partners and delivered as appliance-based software or Security-as-a-Service (SaaS), Websense content security solutions help organisations leverage web 2.0 and cloud-based communication, collaboration, and social media, while protecting from advanced persistent threats and modern malware, preventing the loss of confidential information, and enforcing internet use and security policies. Websense is headquartered in San Diego, California with offices around the world. For more information, visit www.websense.com.
Follow Websense on Twitter: www.twitter.com/websense <http://www.twitter.com/websense>
Join the discussion on Facebook: www.facebook.com/websense