Subscribe & Follow

Advertise your job vacancies

What is a targeted attack?

15 Oct 2015

Targeted attacks can be considered one of the biggest cyber-threats to an organisation in today's Internet-connected landscape. It is the worst-case scenario for any company of any size, as not only does the targeted company lose reputation, it could also cost millions in damages. We hear about these targeted attacks in headlines as 'data breach' incidents, like the ones that affected Sony, Target, and Ashley Madison.

Susbany via pixabay

As sensational and damaging as they're made to sound like in the news, the data breach itself doesn't paint the entire story. There is even more to a targeted attack than bringing big companies to their knees, as they're also used for cyber espionage activities against countries and their government agencies.

So what is a targeted attack? How are they different from the usual threats we keep hearing about in the news? Trend Micro wants to answer all these questions and more with this first part in a series of articles tackling the threat that could cripple department stores as easily as it could topple governments.

When is an attack considered a targeted attack?

An attack can be considered a targeted attack when it fulfills three main criteria:

• The attackers have a specific target in mind and has been shown to have spent considerable time, resources and effort in setting up or carrying out the targeted attack

• The main aim of the targeted attack is to infiltrate the target's network and steal information from their servers

• The attack is persistent, with the attackers expending considerable effort to ensure the attack continues beyond the initial network penetration and infiltration of data.

Targeted attacks are often discovered years after the fact, after thousands and even millions of customer records or units of information already stolen.

Read the full article here.