Malware, Mobile Lead SMB Security Threats

Online marketing and blogs are another key attack vector that small and midsize businesses need to guard, says Blue Coat Security researcher.

(click image for larger view)
Slideshow: Top 10 SMB Predictions For 2011
The bad guys lurking in the digital shadows are as active as ever, and smaller businesses arent safe just because they dont trade in state secrets.
Thats the overall message from Chris Larsen, head of Blue Coat Securitys research lab, who spoke with me recently about the key trends and threats that small and midsize businesses (SMBs) need to keep tabs on in 2011.
First, the good news: Most SMBs are not going to have the sorts of secrets that the Chinese military would be after, or the U.S. government if they were behind Stuxnet, or whoever you want to speculate on your conspiracy theories there, Larsen said.
So what should smaller organizations worry about?
If I were an SMB, I would be more concerned about what I call mass-market malware, Larsen said. Those are the sort of attacks that are launched fairly indiscriminately by the bad guys just trying to infect whoever they can, and then they will sift through the list of computers theyve infected and try to sort out higher value targets.
If an attacker realizes theyve gained access to a finance staffers computer inside an SMB, they are likely to concentrate their efforts there rather than, say, a less fruitful consumer account. Recent reports have found that
malware volume doubled
in 2010, with more than half of all online attacks caused by
automated toolkits
.
For the bad guys, it is a much bigger score to hit an SMB computer that belongs to the corporate accountant, and theyve got a couple hundred thousand dollars in their bank account, whereas a typical home user might have a couple thousand dollars, Larsen said. Thats where theyre going to focus.
Smartphones and mobile devices are a growing concern for systems administrators and security folks alike, Larsen said, even those with strong network protections already in place.
Now youve doubled or tripled the number of infection vectors you need to worry about and the tools you have available to deal with those platforms arent mature yet, Larsen said. He added that a true cloud security initiative is likely needed because its too difficult to have client-side apps protect every type of device and platform. Its not a desktop metaphor anymore.
(click image for larger view)
Slideshow: Top 10 Security Stories Of 2010
The fact that attacks on SMB systems dont often generate headlines -- as with recent government or larger enterprise hacks -- might actually make them more vulnerable. Awareness is key, especially in organizations where IT resources are spread thin, as when all tech things fall on the shoulders of one manager or employee.
For the SMBs who dont have the level of budget and security people that a larger organization might have, the problems magnified, Larsen said.
He encourages systems administrators and other IT pros at SMBs to think about what kinds of attacks their company might attract and what the attacker might be after -- financial and customer information are two common targets -- and then adds some unsettling advice: You have to start from the premise that whatever defenses you have put in place wont work.
Thats not intended to cause hopelessness, but rather to keep SMBs alert and better able to identify unusual activity on their networks. That remains true, Larsen said, even when a smaller firm has enlisted the help of a vendor like Blue Coat.
Staying current with patches -- and not necessarily just waiting for automatic updates -- is also critical: Its a necessary nuisance that you have to keep up with, Larsen said. Education, too, is important: Larsen recommends blogs such as Threatpost, Krebs on Security, and, of course, Blue Coats own security blog as good ways to keep tabs on whats out there. Staying in the loop is especially important as newer technologies, such as HTML5, emerge and evolve.
Larsen said the rapid rise of online marketing channels such as social media and turnkey blogging platforms has likewise increased exposure to security risks. Its become really easy for someone who sets up a Web site now to add all kinds of cool stuff to it just by clicking a check box, Larsen said. By checking that box, Ive now introduced another security hole.
A marketing manager with virtually no Web development chops, for example, can launch a company blog within a matter of minutes today. But if no consideration is given to the blog as a potential entry point for an attack and monitoring it accordingly, it could easily become vulnerable. Larsen said he encounters countless instances of malware that can be traced back to dead blogs and wikis, particularly those that are still running on older versions of the software platform.
In 2011, staying offline likely isnt a feasible sales and marketing approach for most SMBs. But doing business online requires a certain amount of vigilance.
You now have a moral responsibility to keep an eye on how the bad guys might try to use your Web site as a way as a way to get into your customer database, Larsen said. If youre not willing to do that, you need to find somebody who will, or have the discussion that maybe this isnt worth the hassle, its not worth the risk.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Malware, Mobile Lead SMB Security Threats