Which of the emerging trends cited by experts in the article “Security Predictions 2013-2014: Emerging Trends in IT and Security”: Ransomware Ransomware is a type of malware that is used for extortion. The attacker distributes malware that will take over a system by encrypting the contents or locking the system;
Which of the emerging trends cited by experts in the article “Security
Predictions 2013-2014: Emerging Trends in IT and Security”:
Ransomware
Ransomware is a type of malware that is used for extortion. The attacker distributes malware that will take over a system by encrypting the contents or locking the system; the attacker then demands money from the victim in exchange for releasing the data and/or unlocking the system. Once payment is delivered, the attacker may or may not provide the data or access to the system. Even if access is restored, the integrity of the data is still in question. This type of malware and delivery mechanism will become more sophisticated in 2013.
Social Media
Use of social media sites has grown beyond just sharing personal information, such as vacation photos and messaging. These sites are being increasingly used for advertising, purchasing and gaming. For 2013, attackers will look to exploit this volume and variety of data being shared to credentials or other Personally Identifiable Information (PII), such as social security numbers.
Hactivism
Attacks carried out as cyber protests for politically or socially motivated purposes, or “just because they can” have increased, and are expected to continue in 2013. Common strategies used by hactivist groups include denial of service attacks and web-based attacks, such as SQL Injections. Once a system is compromised, the attacker will harvest data, such as user credentials, to gain access to additional data, emails, credentials, credit card data and other sensitive information.
Advanced Persistent Threat
Advanced Persistent Threat (APT) refers to a long-term pattern of targeted hacking attacks using subversive and stealthy means to gain continual, persistent exfiltration of data. The entry point for these type of espionage activities is often the unsuspecting end-user or weak perimeter security. Whether focused on exploiting vulnerable networks or unsuspecting end-users, APT will remain a consistent threat to networks in 2013.
Spear Phishing Attacks
Spear phishing is a deceptive communication, such as e-mail, text or tweet, targeting a specific individual, seeking to obtain unauthorized access to personal or sensitive data. Spear phishing attempts are not typically initiated by “random hackers” but are more likely to be conducted by perpetrators seeking financial gain, trade secrets or sensitive information. Spear phishing is often the nexus to cyber espionage/APT and will continue to increase this year.
do you think has had (or more properly, will have) the most significant impact on information security, from a cybercrime perspective? Why?