hp-security-research-cyber-risk-report-pdf-2-w-1408

HP Security Research | Cyber Risk Report 2015A second common attack pattern, mostly targeting Korean banks, is delivered as a fake mobilebanking app that attempts to replace existing mobile banking apps with malicious copies. Oneof the more interesting examples was Android.Trojan.Gepaw, discovered in January. Gepawwas one of the first Android malware samples to be purposefully installed by its Windowscomponent if an Android device was connected to a desktop. 103Overall, 2014 was a significant year for mobile banking malware, but we have not yet seen itreaching the potential we have observed with Windows banking malware. We will continue tocarefully monitor the development of mobile banking malware in 2015.Figure 16. Number of Android banking Trojan samples discovered monthly during 2014 by ReversingLabs1,000800High9186004002000Low41Jan Feb Mar Apr May Jun Jul Aug Sep Oct NovConclusionThe targets rise and fall, but the overall trend in volume is unambiguous: Malware threatsare more widespread and pernicious than ever. The creators of malware have becomesmarter and more aggressive and will continue to do so, both developing new forms of attackand repurposing older approaches and known vulnerabilities. It continues to be critical forenterprises to ensure all systems are protected, regardless of platform; though not a cure-all,anti-malware protections remain an effective defense, particularly against attacks aimed atlong-known vulnerabilities. Those ongoing efforts are the proper and measured response tothose in the industry who seem to dismiss the usefulness of anti-malware protections. Theywon’t catch every attack by modern malware, but they’ll miss 100 percent of the threats they’renot deployed against.39