Current INFOCON status

Follow Us

Showing posts with label Monthly Report. Show all posts
Showing posts with label Monthly Report. Show all posts

Wednesday, September 4, 2013

September 2013 Reported Cyber Attacks



Statistics on Cyber Attacks, also referred as cyberwarfare and sometimes Hacktivism in specific situations. Showing the who, what, when, where and why of this month’s cyber attacks. Tracking attacks by Anonymous or the Syrian Electronic Army and the industries targeted.

Wednesday, May 22, 2013

May 2013 Reported Attacks

This is a new feature, posting monthly cyber threat reporting as cyber attacks events happen. Statistics shown are current as of the reporting month. All data is gathered from various reporting sources around the web as cited in the weekly updates and attempts to show near real time threat reporting as cyber events occur and are reported.

Friday, May 10, 2013

Monthly Report Activity for April 2013

April has been a busy month. Global trending data sets from news sources are showing some interesting results.
Who~ Numerous organizations and some individuals were recorded in this months sample. When discounting miscellaneous individual attributed attacks, Anonymous, Izz ad Din al-quassam cyber fighters and the Syrian electronic army rank tops in attacks this month. The interesting correlation is the method of attack for each of these groups and their intended targets. Izz ad Din al-quassam cyber fighters targeting banks via DDoS, while Syrian Electronic Army choosing social media hijacking via twitter against news and government targets. Anonymous trending sample did not reveal a common attack or target pattern.


 



Additional data gathered through global honeypots shows a concentration of bad DNS call backs from malware infections or embedded within malware binaries to domains located mostly in Germany.

 



What and How~ On the victim side, data from the sample shows government, financial and internet services companies to be number one as favorite targets of attackers this month. Financial companies being hit by DDoS, and a prevalence of government organizations being hit by SQLi attacks. Internet services were mostly targeted through SQLi and DNS hijacking.








Where~ April attacks map shows geo approximate geolocation of victims and the second map shows known attack sources and C&C servers globally as identified by honeynet. Source: http://mtc.sri.com/