Is Your Company Prepared?
In Q1 2014, Agari saw a dramatic evolution in phishing, with CryptoLocker “ransomware” and GameOver Zeus data-theft malware driving large attacks. CryptoLocker encrypts the user’s hard drive until a $400 Bitcoin ransom payment is made, and GameOver Zeus is the latest data-theft malware. These attacks abuse a growing number of domains, with attacks typically spiking from thousands of malicious emails per day, to millions as the criminals attempt to let loose the malware barrage before the security industry can respond.
Unfortunately, too many companies fail to join their peers in taking advantage of the DMARC standard.
We have just released our Q1 TrustIndex, which covers the period from January through March 2014 and identifies the sectors and companies that have the highest and lowest risk for dangerous emails – such as these malware-driven attacks on consumers. You can download the complete Q1 TrustIndex for free here and see how your industry stacks up.
Other Notable highlights from the Agari TrustIndex Report:
- Health Care continues to be the worst performer across all measures of the study and most susceptible to email attacks and cyber-fraud. Health care records are five times more vulnerable than credit card data, categorizing all but one health care company as Easy Targets.
- Financial Services was broken down into Payments, Mega Banks, Large Banks and Retail Banks (Europe) in Q1.
- Retail Banks: in Q1 the ThreatScore for the largest retail banks jumped 500%, primarily the result of two months of heavy spamming connected with two banks. This shows that criminals are constantly shifting their targets and the attack landscape is volatile.
- Social Media has been a consistent winner in security, with sites such as Facebook and Twitter achieving a perfect TrustScore of 100. These two companies were among the seven companies, out of 133 who achieved a perfect TrustScore.
- Retailers v. Etailers
- Retailers are still one of the main targets of email attacks, yet the sector’s ThreatScore decreased by nearly 53% from Q4 to Q1, indicating that fraudsters are aiming for higher profile attacks.
- Etailers remain leaders in email security, with companies such as Netflix, Amazon and Groupon maintaining perfect, or near-perfect, TrustScores. Retailers have a long way to go to catch up to the security practices of Etailers.
Read the full report here