About
Subscribe
  • Home
  • /
  • Malware
  • /
  • Security threat report highlights cause for concern for banking, mobile applications

Security threat report highlights cause for concern for banking, mobile applications

* Trend Micro's latest threat report highlights concerns for Q4 and holiday shopping season
* Experts observe sustained wave of Apple-related phishing sites and online banking malware increase

Johannesburg, 15 Nov 2013

In its recent Q3 2013 Security Roundup Report, Trend Micro (TYO: 4704; TSE: 4704) warns consumers of a peak in both the volume of Apple iOS phishing sites, as well as a sizeable uptick in online banking malware.

The findings are closely linked to its Q2 report where mobile threats were once again under the spotlight as one of the fastest-growing areas of concern for consumers and businesses alike. The latest Q3 report's findings, however, suggest consumers should be alert and cautious during the holiday shopping season to protect personal and financial data from being compromised.

"With the pervasiveness and ease of use of online banking, we as consumers trust these applications almost blindly," states Gregory Anderson, country manager at Trend Micro South Africa. "It is worrying that our Security Roundup Reports consistently highlight online banking as an area for concern and we want to urge consumers to be vigilant when using online banking sites. You must ask questions of the security employed by your bank, as well as ensure you yourself are secured on all devices you access these applications from."

Another area highlighted by the report is that, while Apple has been traditionally perceived as a safe-haven against threats, the company's findings reveal that personal information (of its users) can be jeopardised as phishing scams that target the platform continue to gain momentum. According to Anderson, this evidence suggests a potential perfect storm looming in the holiday season as busy commercial and consumer users leverage mobile platforms.

In respect to the report's findings, it has revealed that, after a spike in Q2 (5 800 in May), Apple-related phishing sites have remained steady throughout Q3 with 4 100 detected in July, 1 900 in August and 2 500 in September. This raises concern of potential new targets in Q4 with analysts estimating Apple to sell 31 million iPhones and 15 million iPads in the fourth quarter alone.

To substantiate the banking concerns, Trend Micro researchers also identified more than 200 000 malware infections targeting online banking in Q3. Three countries stood out as the most targeted, with the US accounting for almost one quarter (23%) of online banking malware infections worldwide, followed by Brazil with 16% and Japan with 12%.

Europe's top countries, Germany and France, had only 3% respectively, which may stem from the regions' high degree of multi-factor authentication requirements with online banking transactions. Along with these increases, the level of sophisticated obfuscation techniques used by threat actors has also risen. We found within the online banking Trojan called KINS, anti-debugging and anti-analysis routines.

"While the above-mentioned countries have been singled out as the worst hit, we cannot discount the effects the online banking threats pose for us here in South Africa, particularly with the rise in the use of smartphones. In our region, we at Trend Micro are trying to work with businesses to create awareness around mobile security threats, as until now, it has been an area in which many are playing possum, some are avoiding, and others in our industry are simply saying doesn't exist and, as a result, will have no impact on the end-user, which couldn't be further from the truth. The people who lose in this blinkered approach adopted by our industry are the consumers," ends Anderson.

Share

Trend Micro

Trend Micro, a global leader in security software, rated number one in server security (IDC, 2013), strives to make the world safe for exchanging digital information. Built on 25 years' of experience, its solutions for consumers, businesses and governments provide layered data security to protect information on mobile devices, endpoints, gateways, servers and in the cloud. Trend Micro enables the smart protection of information, with innovative security technology that is simple to deploy and manage, and fits an evolving ecosystem. All of its solutions are powered by cloud-based global threat intelligence, the Trend Micro Smart Protection Network infrastructure, and are supported by more than 1 200 threat experts around the globe. For more information, visit TrendMicro.com.

Editorial contacts

Alina Golea
Anti-Clockwise Consulting
(+27) 11 314 2533
alina@anticlockwise.co.za