Making Sense of Today's Cyber-Threat Landscape
"Cyber-crime is big business," notes a recent Trustwave Global Security Report. "We hear it so often that the words threaten to lose their impact." Nevertheless, there is a very real impact. The security solutions provider reports that a malware campaign can earn a mind-bending U.S. $84,100 in profit on an investment of merely $5,900. This amounts to an ROI of 1,425 percent—and typically within 30 days. What's more, as enterprise software vendors have moved to the cloud, so too have malware vendors. In the past, prospective cyber-criminals bought exploit kits as packaged software. However, today they pay for access to a central server administered by the exploit kit maker, who keeps it stocked with the freshest exploits and all the tools one needs to exploit thousands of unsuspecting computers. Coping with Malware-as-a-service and other emerging challenges has become a huge problem. Here's a look at some of the latest trends, based on an investigation of hundreds of data-compromise investigations across 17 countries.