The latest Global Business Security Index from IBM finds threats increasingly aimed at financial gain, rather than hacker bragging rights. The first half of 2005 saw more than 237 million security attacks overall, more than 20 percent of which were aimed at government computers. The United States was overwhelmingly the target location for attacks (12 million), followed distantly by New Zealand (1.2 million) and China (1 million).
Email continues to grow as a security menace, according to the report. Continuing to rise are “phishing” emails, messages often disguised as communications from legitimate entities that seek to pry personal and financial information from the unwary. Believed to be largely driven by criminal gangs, phishing was tied to 35.7 million emails in the first half of 2005. The experts also noted an increase in “spear phishing,” highly targeted and coordinated attacks at a specific organization or individual designed to extract critical data. More and more electronic messages contain viruses that can harm computer or network operations. In January of 2004, 1 in every 129 emails contained a virus; by June of this year, infections had spread to one in every 28 emails. .
Surprisingly, spam, unsolicited and unwanted email, provided a bright spot in the study. The ratio of spam to legitimate email continuously decreased over the course of the last six months, from 83 percent in January to 67 percent in June 2005.
"IBM advises its clients to rapidly adopt a holistic, enterprise-wide approach to security and risk management," said John Lutz, general manager, Financial Services Sector, IBM.
The Global Business Security Index is a worldwide barometer of security trends collected and analyzed by IBM’s Global Security Intelligence team and its partners.