18 percent of Govt and Defense sector attacked globally, says Kaspersky

BANGALORE, INDIA: In a survey of nearly 4,000 IT managers across 27 countries, Kaspersky Lab have not only found that targeted attacks on the rise year-over-year, but also identified the business sectors most likely to be targeted.

Globally, 18 percent of organizations in the Government and Defense sector reported at least one targeted attack within the past 12 months. The rate of targeted attacks reported within the Government and Defense sector was the highest rate reported in this year's survey, a notable increase from the global average of 12 percent reported across all business sectors.

When looking at data across all business sectors, it's also clear that targeted attacks are not limited to the Government and Defense industry. Other business segments have felt the brunt of targeted attacks at a higher-than-average rate, including the Telecommunications industry where 17 percent of businesses reported targeted attacks, and the Financial Services and Transportation and Logistics sectors, both of which reported targeted attacks within the last 12 months at a rate of 16 percent.

The survey responses show the overall number of targeted attacks to be increasing as well. The 12 percent of all businesses reporting a targeted attack in 2013 has risen from the 9 percent average reported in 2013 and 2012.

94 percent of companies reportedly encountered at least one externally-sourced data security incident within the past 12 months, including phishing attacks, DDoS attacks, and theft of mobile devices. In 28percent of these instances, business reported the loss of sensitive business data. The increase in the prevalence of targeted attacks, both in volume and in types of businesses being targeted, comes at a time when high-profile targeted attacks are being uncovered at an alarming pace.

While the overall amount of data stolen from targeted attacks is lower than the losses that result from general malware attacks, it must be noted that general malware attacks themselves are much more common (an average of 61 percent of businesses reported malware attacks compared to an average of 12 percent reported targeted attacks).

However, the value of the data stolen from a targeted attack is much more likely to be highly valuable to the attackers, and the loss of this highly-sensitive data (future product plans, company financial statements, etc.) would cause more long-term damage to a company's business outlook.

A "targeted attack" typically consists of several malicious components that operate in tandem to bypass an organization's security measures, infect machines, and steal sensitive data.These attacks can implement unique modifications to common malware, or exploit specific vulnerabilities in targeted organizations.