Story image

Cyber threat spotlight: Kiwis report more, lose less in Q2

19 Sep 2018

CERT NZ’s April-June 2018 Quarterly Report suggests that cyber threats – and the amount of people who are reporting them – are once again on the rise, and fewer people are losing money.

The report says that there were 736 incident reports in Q2, compared to 506 in Q1. While Kiwis lost $2.2 million from those incidents, it’s a 24% drop in just a single quarter, and 68% of incidents reporting money loss were for amounts lower than $500.

That doesn’t mean that New Zealanders should rest easy, as CERT NZ’s analysis of incident types found that phishing and credential harvesting is taking a toll on businesses and individuals. 

The number of phishing and credential harvesting reports skyrocketed from 196 in Q1 to 455 in Q2. Some of this can be attributed to CERT NZ’s close collaboration with the finance sector, which reported 74% of incidents.

The ever-persistent scam industry is still up to its old tricks – there were 104 reports of scam and fraud, of which most related to individuals. 

The report also found that those most likely to be impacted by direct financial loss are over 55 years of age, however those aged 35-44 also reported $77,300 in losses.

In addition, most reports about individuals came from those aged 65 and over (25%), while those aged 25-34 followed closely behind (21%).

Two incidents involved scam and fraud involved losses of $100,000 or more. They join two other incidents to make up 77% of all reported financial losses, totalling $1.7 million. The other two incidents of phishing and credential harvesting and unauthorised access.

While phishing and credential harvesting affected many organisations, vulnerabilities were also responsible for 69 incidents in organisations.

Those reported vulnerabilities include ones in websites or web servers (37 reports), authentication, authorisation and accounting (10 reports), networking (9 reports), and a number of others across software, applications, mobile devices, peripherals, and IoT devices.

“Of the 69 vulnerability reports received 1 January -30 June 2018, 54% related to website applications and servers, 14% to authentication, authorisation and accounting and 13% to networking,” the report says.

In one case a security researcher at ZX Security discovered vulnerabilities in cybersecurity products from global cybersecurity firm WatchGuard Technologies. WatchGuard, CERT NZ and the researcher worked together to analyse and verify the three vulnerabilities as part of a coordinated disclosure.

They released CVE identifiers as part of their findings and WatchGuard patched the vulnerabilities.

"By working together, potentially serious flaws in these products were able to be resolved in a timely and positive way, helping keep New Zealand businesses and organisations safe,” CERT NZ states.

Businesses and individuals can report cybersecurity incidents to CERT NZ. To do so, visit www.cert.govt.nz or call Freephone 0800 CERT NZ (0800 2378 69).

Doctor Who fans: This one’s for you
Doctor Who: The Edge of Time is a new, VR gaming experience set to be released this September.
Are AI assistants teaching girls to be servants?
Have you ever interacted with a virtual assistant that has a female-based voice or look, and wondered whether there are implicitly harmful gender biases built into its code?
Hands-on review: Is the Apple Watch 4 worth the price?
Apple’s flagship wearable device, the Apple Watch, is generally touted as the gold standard for what wearables should be able to achieve today.
Who's watching you? 
With privacy an increasing concern amongst the public, users should be more aware than ever of what personal data companies hold.
Game review: Rage 2 (PC)
The similarities between Mad Max and Rage 2 are very apparent. The overall setting and design aesthetic are clearly inspired, if not from the Mad Max game, from the Mad Max movies.
Apple brings 8-core processors to MacBook Pro
The addition of 8th- and 9th-generation Intel Core processors will deliver 40% more performance than a 6-core Pro.
Hands-on review: Playing the long game with the The iPhone XR
The red XR is a rare case of having a phone that’s ‘too pretty to be covered’ - and it’s not hard to see why.
Hands-on review: MiniTool Power Data Recovery Software
I came across a wee gem of advice when researching the world of data recovery. As soon as you get that sinking feeling and realise you’ve lost a file, stop using your computer.