Dell: Malware attacks double in just 12 months

Encryption flaws, advanced exploit kits and Android malware top Dell's list of security threats

Companies are being left exposed to malware by increasingly sophisticated techniques, such as using SSL/TSL to bypass firewalls and ever evolving exploit kits, according to a new report by Dell Security.

In its Annual Threat Report (registration required), Dell reported that the number of malware attacks that occurred in 2015 was nearly twice that of 2014, with hackers making particular use of weaknesses in businesses security programmes.

Advertisement - Article continues below

Curtis Hutcheson, general manager of Dell Security, said: "Many of the breaches in 2015 were successful because cybercriminals found and exploited a weak link in victims' security programs due to disconnected or outdated point solutions that could not catch these anomalies in their ecosystem."

Examples of this included the continued use of Windows XP, an underuse of security auditing and not having the right infrastructure in place to detect an intrusion once it had made its way into the company network.

Key trends noted by Dell Security that leave businesses vulnerable are the increased speed with which exploit kits are evolving, the continued and growing use of cyber criminals hiding malware within SSL/TSL encrypted traffic to penetrate firewalls, and the continued rise of Android malware.

With regard to exploit kits, Dell Security highlighted four key trends, including the use of forensic countermeasures such as encrypting the malware payload, new evasion techniques like URL pattern changes, concealing malicious files within benign ones, and new landing page entrapment techniques.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

The company called the Android platform a prime target for malware, with a large number of smartphones at risk globally because of this, particularly with regard to attacks on banking apps and other financial information, as well as ransomware.

It also predicts that in 2016 this will grow to include attacks on Android Pay via malicious apps and vulnerabilities in point-of-sale (POS) terminals.

Dell Security is not the only organisation to notice the continued growth of Android malware, whith the trend also being noted also by Intel Security in its newly released Mobile Threat Report and IBM Security in its X-Force Threat Intelligence Report, also released today.

Featured Resources

Navigating the new normal: A fast guide to remote working

A smooth transition will support operations for years to come

Download now

Putting a spotlight on cyber security

An examination of the current cyber security landscape

Download now

The economics of infrastructure scalability

Find the most cost-effective and least risky way to scale

Download now

IT operations overload hinders digital transformation

Clearing the path towards a modernised system of agreement

Download now
Advertisement

Recommended

Visit/antivirus/28144/best-antivirus
antivirus

Best antivirus for Windows 10

30 Jun 2020
Visit/security/hacking/356152/searching-for-a-new-job-that-linkedin-job-offer-may-be-fake
hacking

Searching for a new job? That LinkedIn job offer may be fake

19 Jun 2020
Visit/hardware/laptops/356135/dell-inspiron-14-7000-review-capable-but-not-uncompromising
Laptops

Dell Inspiron 14 7000 review: Capable, but not uncompromising

18 Jun 2020
Visit/marketing-comms/business-communications/355842/dell-technologies-announces-q1-2021-financial
business communications

Dell Technologies reports strong Q1 as laptop sales soar

29 May 2020

Most Popular

Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/security/vulnerability/356295/microsoft-patches-high-risk-flaws-that-can-be-exploited-with-a
vulnerability

Microsoft releases urgent patch for high-risk Windows 10 flaws

1 Jul 2020
Visit/policy-legislation/data-protection/356344/eu-institutions-warned-against-purchasing-any-further
data protection

EU institutions told to avoid Microsoft software after licence spat

3 Jul 2020