Symantec: Phishers targeting social-networking sites

Social networking Web sites are fast becoming a key target for online fraud, according to the latest Symantec Internet Security Threat Report.

The report reveals for the second half of 2007 there were 87,963 "phishing hosts", an increase of 167 percent from the first half of 2007. The report said that "66 percent of phishing attacks in the United States were directed toward social networking sites".

Symantec Australia managing director Craig Scroggie said social networking Web sites are a treasure trove of personal data, listing information such as birthdate, location and employment history.

"[Users of these] Web sites are putting up a large amount of confidential information that is being used for fraudulent activity and financial gain," Scroggie said. The Symantec report notes that social networking sites are attractive to cybercriminals because such pages "are generally trusted by users".

Personal information is collected and sold on the Internet black market, for as little as US$1. "We're starting to see the area mature significantly," Scroggie said.

The report also notes that vulnerabilities in Web sites are more popular malware vectors as they allow for more sophisticated and multi-staged attacks.

He added that some people used the proceeds of these sales to fund further attacks. "People are employing programmers dedicated to the production of those threats," Scroggie said.

While the report found most attacks continued to occur and originate in the United States, China is becoming increasing important as a source of malicious code.

"Russia was implicated in the widespread distribution of malicious code over the last couple of years. That dropped off in 2007," Scroggie said, "but [security threats] have recently re-emerged in China."

Scroggie said the spread of malicious code was expected to increase, with the growing use of portable data storage devices. "There is an increased security threat from portable media devices, whether it be a USB flash drive or a MP3 player," he said.