Cyber-crooks target chat platforms

Unique threats soar in 2007

Written by Clement James

More than 1,000 unique threat incidents were reported over instant messaging, P2P and chat vectors in 2007, according to research from FaceTime Communications.

Nearly 20 per cent of IM threats were reported on the AOL Instant Messenger network, 45 per cent on MSN Messenger and 20 per cent on Yahoo Instant Messenger.

Some 15 per cent occurred on all other IM networks, including Jabber-based private networks.

Attacks on private networks have more than doubled since 2003, rising from seven per cent of all IM attacks in 2006 to 15 per cent in 2007.

FaceTime researchers also saw a shift in the non-IM vectors used to distribute viruses, malware and spyware in 2007.

Most notable was the rise in IRC-distributed attacks, which accounted for 58 per cent of attacks in 2006, rising to 72 per cent by the end of 2007.

"Threats over IM and P2P networks are occurring at an average of just over five unique incidents per day," said Frank Cabri, vice president of marketing and product management at FaceTime.

"Additionally, social networking sites are increasing in popularity resulting in a corresponding increase in malicious activity targeted at users of these sites."

FaceTime researchers noted an increasing use of social engineering during 2007 to propagate threats across IM networks and Skype, as well as social networking sites such as MySpace.

The firm's Security Labs pointed to the increasing boldness of a growing underclass of "glory hackers" on social networking sites.

The danger to corporate networks lies in a growing tendency for workers to blur their work and professional lives, often surfing social networking sites on work PCs leading to information loss, inbound malware threats and compliance risks.

"Many hacks and scams are creeping into the mainstream areas of MySpace and other social networking sites as the perpetrators become bolder and more aggressive," said Chris Boyd, FaceTime's director of malware research.

"The most horrendous content imaginable is now easily stumbled on via simple redirects and blog hijacks. The myth that you have to 'go looking for it' has never seemed further from the truth."

Boyd pointed to an aggressive shift in hacker behaviour over the past year, involving a growing underclass of young hackers who do not care about revealing their identity.

"Children as young as 12 are sharing professional phishing kits and trading stolen credit card details," said Boyd.

FaceTime warned that MySpace and other social networking sites will continue to be the most popular target for hackers, phishers and spammers in 2008 as long as they continue to offer the same level of profile customisation to users.

Tags:

Further reading

MySpace page pushes fake Microsoft update

Dodgy profile hosting 'malware cocktail'   More...

Police subpoena MySpace over Meier suicide

Wire fraud laws may have been broken   More...

Cyber-gangs gear up for 2008

Let's be careful out there   More...

2007 Roundup: The rise of the 'omni-consumer'

Sceptical end users use technology to exert power and control over organisations   More...

Related articles

FaceTime uncovers online credit card stash

'Stupid criminal' posted stolen details on warez forum ... along with his photo   More...

Hackers step up website attacks

Security forecast for 2008 makes grim reading   More...

vnunet.com analysis: home PCs still wide open

New targeted attacks also on the rise   More...

'Greynets' waiting to snare enterprises

Consumer messaging apps leaving companies at risk   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement