Welcome!

Security Authors: Elizabeth White, Dana Gardner, Lori MacVittie, Mike Castañeda, Tommy Petrogiannis

Related Topics: Java, Security

Java: Article

IBM Security Report Predicts Mobile/Satellite Attacks in 2005

Global Business Security Report Sums Up 2004, With Predictions For 2005

Stuart McIrvine, director of IBM's security strategy, said yesterday: "After a year like 2004, many IT departments feel beaten down from combating viruses like Mydoom and Netsky. However, through sophisticated intelligence gathering and analysis, IBM can now identify and understand many of these risks. In addition, businesses and consumers can use this information to help them to not only anticipate these security risks, but more importantly, to prepare themselves to avoid a new breed of attacks in 2005."

According to IBM, results from its 2004 Global Business Security Index Report show mobile devices becoming targets of viruses and worms. IBM, looking at potential security threats in 2005, said this may be the year for the aggressive spread of viruses and worms to handheld devices, cell phones, wireless networks, and embedded computers, which include car and satellite communication systems.

The report, written by IBM's Global Security Intelligence Services team, said e-mail-based worms and viruses wreaked havoc on corporate networks in 2004. E-mail worms such as Bagle, Netsky and Mydoom led the pack in the number of variants and overall impact. During the latter part of 2004, a growing number of viruses aimed at PDAs and other mobile devices, such as the Cabir worm, were released. Such worms will likely be used by copycats and may start an epidemic of viruses aimed at mobile devices.

IBM's Global Business Security Index report contains a number of other potential trends in 2005. Identity theft may increase because of phishing attacks that use "spoofed" e-mails and fraudulent Web sites designed to deceive recipients into divulging personal information such as credit card numbers, account usernames and passwords, social security numbers, etc. will likely continue to plague businesses and consumers. Also, there will likely be an increase in the disruption of VoIP networks. In particular, eavesdropping and denial of service attacks carried out remotely against VoIP networks could provide significant damage for enterprise organizations.

What makes the new crop of security threats more difficult is that fact that writers are getting smarter and are employing basic software development practices to spread destructive software, according to the report. Automated "botnets" are also cited as likely to move to instant messaging networks for command and control of infected systems. The number of known viruses grew considerably in 2004. And even measures like the CAN-SPAM Act seem to not work, as spam has continued to proliferate. It is estimated that a majority of all email traffic on the Internet is spam.

The tsunami that impacted three continents in the Indian Ocean ended a devastating year of natural disasters. Hurricanes in North America, typhoons in Asia and numerous other events around the world impacted lives and property. For corporations, the safety of their employees, their property, and IT environments is of serious concern. The events of 2004 highlight the need for all organizations to have a continuity and disaster recovery plan in place.

Yet another target for viruses is digital images. The report said 2004 ushered in a new era of vulnerabilities that affected digital picture formats such as JPEG and BMP photos. Typically seen as benign files, hackers have discovered ways to embed malicious code in pictures in order to attack a number of different applications used to render images. Clicking on an infected image could set off a virus or worm without the user's knowledge.

More Stories By Security News Desk

SYS-CON's Security News desk trawls the world of security for news of software, hardware, products, and services that seems likely to be of interest to infosec professionals and summarizes them for easy assimilation by busy IT managers and staff.

Comments (4) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
SpamSpamSpamVirusVirusVirus 02/19/05 05:46:39 AM EST

One hesitates to imagine what 2006 is going to look like, and probably we'll all go back to pen and paper by 2010.

dave 02/10/05 02:23:54 PM EST

Using your site is like trying to read a book in the middle of a lazer light show!

Arthur 02/10/05 01:35:54 PM EST

I have to agree with the above comment..
With all the ads and blinky shifty junk on the page, I didn't even finish the second paragraph. I'm off to find another site that cares more about its users than the ad £££.

Bob 02/10/05 12:06:24 PM EST

I don't know about the content of the article, but having one word per line and 90% of the page filled with ads makes it unreadable. I think I'm gonna read it on one of the 72 other sites where it is published.