Updated November 17, 2009
Hackers Have New Technique: 'Spear Phishing'
Associated Press
Hackers are increasingly targeting law firms and public relations companies with a sophisticated e-mail scheme that breaks into their computer networks to steal sensitive data, often linked to large corporate clients doing business overseas.
WASHINGTON — Hackers are increasingly targeting law firms and public relations companies with a sophisticated e-mail scheme that breaks into their computer networks to steal sensitive data, often linked to large corporate clients doing business overseas.
The FBI has issued an advisory that warns companies of "noticeable increases" in efforts to hack into the law firms' computer systems — a trend that cyber experts say began as far back as two years ago but has grown dramatically.
In many cases, the intrusions are what cyber security experts describe as "spear phishing," attacks that come through personalized spam e-mails that can slip through common defenses and appear harmless because they have subject lines appropriate to a person's business and appear to come from a trusted source.
"Law firms have a tremendous concentration of really critical, private information," said Bradford Bleier, unit chief with the FBI's cyber division. Infiltrating those computer systems, he said, "is a really optimal way to obtain economic, personal and personal security related information."
Alan Paller, director of research at SANS Institute, a computer-security organization, said Monday that a major law firm in New York was hacked into in early 2008 in an attack that originated in China.
FBI officials did not immediately return messages for comment on the China connection. The FBI advisory was dated Nov. 1, 2009.
U.S. officials have been cautious about publicly linking cyber attacks to China. But recent government reports have described computer attacks believed to have originated in China, although it is unclear if the intrusions were conducted by, or with the endorsement of, any element of the Chinese government.
As is often the case with cyber crime, Paller said it is difficult to tell whether hackers were working on behalf of the country's government, located in that country, or simply routing computer traffic through that country.
While some computer network attacks may be linked to countries such as China, in some cases they now can be orchestrated by independent cyber crime groups.
The hackers going after law firms, said Paller, often target companies that are negotiating a major international deal — anything from seeking a patent on a sensitive new technology to opening a plant in another country.
"The best documents to steal are in the law firm that represents that company," said Paller, adding that often they are looking for documents that lay out the company's playbook for the deal, or its negotiating positions and tactics.
While opening a "spear phishing" e-mail itself does not pose a danger, they often contain Web links or attachments that when clicked on or opened will infiltrate the network or install malicious programs.
Once the hacker is in the network, they often plant a computer program that searches for, collects and copies files and sends them to a computer server, usually in another country. The program also may create a back door that will allow hackers to get back in later.
The FBI warned that the attachments or links can appear to be anything from a photo to an executable program.
Speaking to a crowd at an American Bar Association conference Friday, Bleier and other U.S. cyber officials warned that companies need to start re-evaluating what they put on their networks because hackers are getting more sophisticated.
While hackers used to be lone cyber attackers, they now more often are part of larger transnational organized crime operations, said Chris Painter, the White House's acting cybersecurity director.
The FBI said it noticed the increase in attacks on law firms and public relations companies during ongoing investigations.
Latest SciTech Videos
Most Active
Most Read
Most Commented
-
Inconvenient Truth for Gore as Arctic Ice Claims Don't Add Up
December 15, 2009 511 comments
-
Obama to End NASA Constellation Program
January 29, 2010 401 comments
-
30 Years of Global Cooling Are Coming, Leading Scientist Says
January 11, 2010 356 comments
-
White House Confirms Course Change for NASA
February 01, 2010 247 comments
-
What's Islam? Don't Ask Google
January 08, 2010 237 comments
-
Panasonic's Toughbook H1 Field makes pansies of those other tablets
February 10, 2010
-
Blockbuster files for bankruptcy in Portugal, blames internet piracy
February 10, 2010
-
Earliest Known Galaxies Spied in Deep Hubble Picture
January 04, 2010
-
Yearlong Star Eclipse May Help Solve Space Mystery
January 04, 2010
-
Stuck Mars Rover About to Die?
January 04, 2010
-
Five New Planets Found; Hotter Than Molten Lava
January 03, 2010
-
Isaac Newton: Who He Was, Why Google Apples Are Falling
January 03, 2010
-
New TechNet CEO Rey Ramsey Speaks!
February 10, 2010
-
Old News: A New Boss for Universal Music in 2011
February 10, 2010
-
Bing Is Not Google, but It Might Be Yahoo in a Year or Two
February 10, 2010
-
BoomTown Heads to TED (and Promises No Pretentious Tweets!)
February 10, 2010
-
IBM Executive: Technology Demand From Clients Picking Up
February 10, 2010
-
Autonomy Prices GBP500 Million Convertible Bond 2015 At GBP20.6334
February 10, 2010
-
Dell Upped To Buy At BofA Merrill Lynch
February 10, 2010
-
2nd UPDATE: CSR Bullish On Technology Market, But Sees 1Q Revenue Dip
February 10, 2010
-
TSMC To Upgrade Technology At Shanghai Plant - Spokesman
February 10, 2010



recommend

Subscribe to Comments







