Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« McAfee CEO: Cybercrime Bigger Than Drug Trade | Main | Using Business Impact to Categorize Malware »

Industrial Cybercrime: Targeting Internet Hosting Services

Why go for thousand for small sites individually when you can after them all at once like an industrial fishing ship. That seems to be the reason behind attacks on hosting services. The latest one, this time against Layered Technologies, is reported by The Register :

The attack on Layered is part of a growing trend in cybercrime in which hackers target a single web host rather than the thousands of individual sites that that rely on it for service. In May, Brinkster.com required customers to change their login credentials after discovering many of them may have been compromised. Other hosts who have been penetrated include PlusNet and IPOWER.

It would seem that the cybercrime industry is bifurcated: there is the attack-the-unsecure-home-PC segment that goes after vulnerable Windows PCs and turns them into bots or infects them with keyloggers to steal bank account information; and then there is the segment that targets commercial and government operations, hacking databases, probing for vulnerabilities, disrupting operations with DDoS attacks (thanks to the botnets provided by the first segment), and either stealing data in bulk or going after targeted intellectual property.

I posted another comment today on comment on McAfee CEO David DeWalt's comment that cybercrime is now bigger than the drug trade. I'm thinking we're going to see more and more about the professionalization of cybercrime. At some point, we'll start to see the adoption of techniques that are used to combat professional, organized crime to how we control cybercrime.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/437

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net