What Malware Had You the Most Worried This Month?

MKM8DY

According to Verizon's 2015 Data Breach Investigations Report, nearly one million new malware threats were released each day last year, with approximately 90% of attacks exploiting vulnerabilities that have been around since the early 2000's.

In our monthly malware roundup, we serve up December's biggest headlines and most disconcerting trends in the world of malware, as well as share key Microsoft security patches worthy of consideration.

What were some of the biggest malware stories to catch your eye? Any of these?

Hyatt Hotels Attacked with Payment-Card Stealing Malware
Malware with Intent to Steal Classified Data Found in Christmas-Themed Apps
New Malware Called "Pro POS" Targets Payment Systems and Evades Antivirus Detection

Which bug gave you the hardest time this month? Sound off!

travisdh1

I had an uncommonly good month. No malware, and only one person clicked the phishing test this month. Course when you're talking less that 20 total people that 1 person is a huge percentage!

Dashrender

Phishing is now my biggest concern.

Users and owners alike can't be bothered to consider if emails are real or not.

brianlittlejohn

@Dashrender I have my users trained pretty well. If they have a question about the legitimacy of an email, they call me.

Dashrender

@brianlittlejohn said:

@Dashrender I have my users trained pretty well. If they have a question about the legitimacy of an email, they call me.

In my office, I'd say I'm about 50/50 - MA's aren't paid enough to care - no matter what. It's everyone else who actually pays attention.

As for the owners - well that's another client.

wrx7m

I do really well with not getting hit with malware, here. I have Trend Micro OfficeScan 11, Barracuda SVF300 (with Cloud filter service) and Sophos UTM with IPS, IDS, etc. I also implemented application whitelisting, per a ginormous thread on SW and that lets me sleep at night.

Edit: I would also like to add that I strongly encourage users asking me if they receive a suspicious e-mail and thank them every time they do. It isn't bulletproof but when they get the gratitude from me on their security practices, they feel better about asking.

scottalanmiller

Have not run into any this month.