Is it an IT tech or a phishing scheme?
Posted by: Timothy Weaver on 02/24/2015 12:23 PM
[
Comments
]
FireEye Mandiant M-Trends reports that impersonating IT departments in spear-phishing attacks is becoming an increasingly popular tactic among hackers, particularly in cyber-espionage attacks.
The report goes on to state that lag time is improving slightly. Breach detection times dropped from 229 days in 2013 to 205 days last year. The slight improvement still means that successful hacker attacks remain undetected for months.
Mandiant’s security incident response work picked up a common thread in major retail breaches last year. Retailers reckoned their virtual machines were sufficiently secured but did not implement two-factor authentication, meaning a single stolen user credential could make their entire network vulnerable.
More details can be found in the 2015 Mandiant M-Trends report (PDF).
You can read more about Phishing on Wikipedia.
The report goes on to state that lag time is improving slightly. Breach detection times dropped from 229 days in 2013 to 205 days last year. The slight improvement still means that successful hacker attacks remain undetected for months.
Mandiant’s security incident response work picked up a common thread in major retail breaches last year. Retailers reckoned their virtual machines were sufficiently secured but did not implement two-factor authentication, meaning a single stolen user credential could make their entire network vulnerable.
More details can be found in the 2015 Mandiant M-Trends report (PDF).
You can read more about Phishing on Wikipedia.
Comments
