Cyber criminals target web payments

Online payment systems may be a target of cyber criminals this year, warns an internet security firm.

ESET Ireland has outlined the techniques it expects cyber criminals will use to target companies and individuals this year.

The firm annually makes predictions on cyber crime. Last year, it warned of an assault on android technology and internet privacy as well as high-tech malware.

ESET pointed out those predictions did subsequently happen.

Now, it is warning of an increase in “targeted” attacks called “advanced persistent threats”. They differ from traditional cyber attacks because they select a target rather than looking for any available corporate targets and also try to stay unnoticed for long periods doing more damage.

ESET pointed to the rise in such attacks with just three identified in 2010, compared to 53 known attacks in 2014.

“These stats are based on well-known public attacks, so it is reasonable to think that the statistics showing a growing trend is real,” it said. “The true number, however, is probably bigger, taking into account attacks that never reach the public record because of confidentiality reasons.”

ESET also warned of a rise in attacks on online payment systems.

“At this point, it is already obvious that cyber criminals will continue putting efforts into payment systems as more money circulates on the web,” it said. “On the other hand, traditional point-of-sale systems are still widely used and malware authors are well aware of that.”

ESET said “ransomware” will be a key strategy for malware developers this year and the threat will continue for a number of years.

“During 2014, we saw big companies hit by ransomware (like Yahoo, Match and AOL). In July, ESET researchers published their Android/Simplocker analysis, revealing the first Android file-encrypting TOR-enabled ransomware,” it said.

Finally, ESET said whole new categories of digital devices are being connected to the internet, from domestic appliances to home security and climate control.

“The trend will accelerate in 2015 but sadly we see no reason why these things won’t become a target for cyber crime,” the company said. “During 2014, we saw some evidence of this emerging trend, like attacks on cars. Attacks and proofs of concept were shown attacking several smart TVs, Boxee TV devices, biometric systems on smartphones, routers and also Google glasses.

“While it probably won’t be a massive problem this year, it is an emerging space for cyber crime. We expect it will take a few more years until it is widely targeted. Nevertheless, this will be a trend, not for its quantity but for its uniqueness and innovation.”

ESET concluded: “These are only the most important topics we have identified as big trends for 2015 in the world of malware and cyber-attacks. There are other current trends like mobile attacks that will continue to rise.”