Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Authenticated Email: Crypto Techniques Help with Spam | Main | Spam is Up - Thank Better Botnet Design & Economics 101 »

Cybercrime and the Economics of Micro-markets

In the old days bank robbers would target banks because "that’s where the money is." Sure, targeting high volume systems is one way to go, for instance, UCLA disclosed last week that personal information on 800,000 students, faculty, alumni and others affiliated with the university were compromised. With wide spread botnets and keyloggers controlling devices and collecting information it is now easier to target individuals - its micro-marketing meets cybercrime. The Washington Post Security Fix and Websense are reporting on type of ransomware that targets emails.

In this attack, a victims email messages and contacts are deleted and a message from the attacker is left demanding payment in return for the messages and contacts. This kind of attack in itself may not be too much of a concern to some but if the economics of ransomware are similar to those of spam, then a relatively small investment combined with an infinitesimal response rate may be enough to spur on this kind of attack.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/148

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net