Trend Micro Q2 2015 roundup finds malware and malicious app downloads for mobile devices increasing in New Zealand

AUCKLAND, 19 August 2015 – New Zealand saw an increase in malware detections in Q2 2015, up from the previous quarter, according to Trend Micro’s latest security roundup report released today, ‘A rising tide: new hacks threaten public technologies.’ The quarter also saw an increase in the number of malicious app downloads by mobile device users in New Zealand.

These increases were noted as New Zealand saw a significant decrease in the number of malicious URLs clicked per country, down to nearly three million in Q2 2015 from more than six million in the previous quarter.

During the second quarter of 2015, cybercriminals became more inventive in their attack methods to infiltrate and abuse existing technologies that are often overlooked. The Trend Micro Q2 security round up report analyses these developments and details the evolution of tools and methods attackers use to get the greatest return on every cybercrime investment.

“In the second quarter, we saw a shift in the threat landscape with cyber criminals becoming more sophisticated and creative, amplifying existing methods of attack, and using them in new ways,” said Dhanya Thakkar, managing director at Trend Micro Asia Pacific. “The ethereal outlook on the threat of cybercrime can no longer be held by the general population. This quarter demonstrated that the potential damage caused by cyber attacks extends far beyond a simple software bug to hacks of airplanes, smart cars and television stations.”

“Smartphones and mobile devices have become a vital part of our way of life but the continued rise in malicious app downloads by users in New Zealand illustrates the high risks attached to them,” said Tim Falinski, director consumer at Trend Micro Australia and New Zealand. “Users need to be aware of the security risks and potential malicious apps. They should also keep their devices and apps updated in order to keep their mobile activity secure against mobile threats.”

Hackers are taking more strategic approaches, refining their methods and targeting more selective victims to improve their infection rates. This is reflected by the exponential increase in the use of several traditional attack methods, including a 50 percent increase in the integration of the Angler exploit kit across the globe, and CryptoWall ransomware becoming highly targeted.

Government entities, particularly in the U.S., have realised the full impact of cyberattacks during the second quarter with massive data breaches on both the Internal Revenue Service (IRS) in May and the U.S. Office of Personnel Management (OPM) system in June. The OPM data breach was the largest of its kind to date, exposing personally identifiable information of approximately 21 million individuals.

Report highlights include:

• Hacks causing disruptions to public utilities
  Broadcast networks, airplanes, automated vehicular systems and home routers pose not only the risk of malware infections, but physical inconveniences and threats.
• Lone wolf cybercriminals gain notoriety via successful ransomware and PoS attacks
  FighterPoS, solo hackers “Lordfenix” and “Frapstar,” along with Hawkeye keylogger attacks, demonstrated that single individuals are capable of making a significant impact in today’s threat marketplace.
• Government entities fight back against cybercrime
  Interpol, Europol, the U.S. Department of Homeland Security and the FBI all played a role in taking down longstanding botnet operations. Additionally, the indictment of Silk Road founder Ross Ulbricht brought to light the nebulous nature and dangers of the Dark Web.
• National and political impacts were made by attacks on government organisations
  The attack on OPM was a shocking realisation that no one’s personal data is safe. Macro malware and island-hopping were among the tactics used to target government data in this and similar breaches.
• Public-facing websites and mobile devices were threatened in new ways
  While threats to software are always present, vulnerabilities in Web apps were proven to be just as dangerous. Attackers will leverage any vulnerability available and custom applications need custom security attention to ensure those entry points are eliminated.

For the complete report, please visit here.

A blog post regarding the report can also be viewed here.