Symantec recently released its 11th Internet Security Threat Report, which offers an overview of threat activity between July 1 and Dec. 31, 2006. It was generated by Symantec’s Security Response organization, which surveys the world’s Internet-based threat landscape, seeing up to 25,000 suspicious, malicious files every week.
According to the report, attackers are refining their methods and consolidating their assets to create global networks that support coordinated criminal activity. The report deems these tactics “underground economy servers.”
Criminals and criminal organizations use them to sell cybercrime tools and stolen information, including government-issued identity numbers, credit cards, bank cards and personal identification numbers (PINs), user accounts and e-mail address lists.
So, is this organized crime online? Yes, said Dave Cole, director of the Symantec Security Response organization, “but not in the traditional kind of ‘Tony Soprano’ sense that a lot of people may think — these people have a service to barter.”
Cole described the phenomenon as an online criminal bazaar.
“Someone shows up and says, ‘I’ve got this Trojan. No one else has it. I’ll sell it to you for $500 to $1,000.’ Another one shows up and says, ‘I’ve got hacked hosts that you can have access to.’ Another one sells identities for $14 to $18. Credit cards run from $1 to $6, depending on how many you buy and where they’re located.”
It was 18 months ago that Symantec first took note of the more criminalized threat landscape.
Please log in or subscribe to read this article