By Justin Rood

Jan 14, 2008 11:46am

More Technology = More Dangers for Users, Security Experts Say

If you think the real world is getting more dangerous, take a peek into cyberspace — but keep your guard up. That’s the word from a panel of top experts, who conclude that the increasing complexity of Web sites, mobile phones and other technology have made people’s everyday interactions with technology more dangerous than ever. Malicious code buried in popular, trusted Web sites was the most dangerous cyberthreat of 2008, the group concluded. THE BLOTTER RECOMMENDS Blotter From China, With Love: Cyberwar the Next Big Threat to the U.S.? Blotter Cybersquatting: The New Gateway Scam to Identity Theft? Blotter U.S. Air Force Prepares for War in Cyberspace Do you have a tip for Brian Ross and the Investigative Team? Click Here for Full Blotter Coverage. Attacks on sophisticated mobile phones also made the list, which was compiled by cybersecurity expert Alan Paller, former U.S. cybersecurity chief Amit Yoran and 10 others. Also, the popularity of USB flash drives and other low-cost mini storage devices as promotional items have made them enticing delivery mechanisms for hackers, according to the group. Slipping a virus into the code on those devices at the manufacturing stage could infect thousands or millions of users’ machines, the panel said. Flash, QuickTime and other multimedia components are increasingly common on Web sites operated by large corporations and other groups trusted by many Internet users. But those tools are also targeted by hackers, said the experts, who can use them to deploy malicious code on a visitor’s computer. The panel was convened by the Bethesda, Md.-based SANS Institute, a computer security research and training center, where Paller works as research director. As companies release incrementally more sophisticated Web sites, security flaws can emerge, the panel said. Likewise, Web users upgrading their browsing software and "plug-ins" can inadvertently create holes in their security thanks to oversights by the software’s programmers, the group said. "Many people believe that when they see their operating systems are being patched, things like Flash are being patched also, but they’re not," said Paller. "The user needs to check to see if there are patches or updates for that software." As well, hackers are increasingly penetrating the software used to collect user information on trusted sites, the panel said. A recent attack compromised 70,000 Web sites, Paller told ABC News. IPhones and other must-have gadget phones are another new target for hackers, the group found.  The increasing sophistication of mobile phone software is increasingly exposing the devices to worms and viruses which can wreak havoc. To read the full list, click here. Click Here for Full Blotter Coverage.

User Comments

Isn’t Technology Wonderful? The hackers are having a ball. This is welcome news to the anti-virus/anti-malware makers.

Posted by: dave | January 14, 2008, 12:28 pm 12:28 pm

This all comes down to what IT people have been saying for years now: YOU are the one responsible for the security of your electronic systems. I am continually amazed at the number of younger users, the ones that grew up with computers and cell phones, who don’t have even rudimentary security on their systems, or don’t keep what they do have updated. These are the folks one would assume would know most about their systems and do everything to keep them “clean”; it seems ludicrous that someone like me, now in my sixth decade, should be advising them on what they need, where to find it, and how to install it.
When I was growing up personal computers were something read about in sci-fi novels and yet, my systems (computer network, cell phones, etc.) are so secure they have never been hit; in truth, due to the security features installed (and kept updated) my computer network can’t even be seen by hackers looking for a target. And none of this was/is hard … initial loading of good security software doesn’t take more than about 30 minutes, tops, and keeping it up-to-date takes mere minutes per week.
If any of your electronic systems end up compromised by malicious software of any kind, it is invariably YOUR FAULT!! Don’t try to blame someone else, don’t try to play dumb … your fault, period. If you don’t like that idea, now would be a good time to take action; if you leave your systems open to the world, the world WILL crap on you; the only question is “When”. (And the answer will likely be “Soon”)

Posted by: Walker Evans | January 14, 2008, 1:48 pm 1:48 pm

I agree that there are Security RISKS in the surfing process..YET..there are Safeguards in the Configuration of your Personal PC..some of the crimminal attacks via a Computing System could be created as a inside job or co-conspiracy..AOL was heavily spoiled by the INSIDE JOB..some Company and Government Office are losing their LapTops..and this might be therorized as tampering at the Company Level and the culprits actually throw the LapTops away…I think its important to remember that we have Personal Home Computers…and that LIMITS what we can actuall do SAFELY..since we live in a democracy I’m sure some PC-users think that they are Corporate Exec..taking over the world..there are PC–crazies out there…just like the FLIP-their-CARS over…the Personal Computer used for Projects/Shopping/Research/Banking/Bill Pay/can be considered very safe…the drawbacks tend to excists where CHEAPNESS-excists…my experiance(6-year)PC User…has been to use MONEY to RUN your PC…NOT Freebies and friendship…charity and Chatter…because there are GIMMICKS…YET…a good Windows OS and bona-fide PC-user will soon find these out.

Posted by: Mark S. M. | January 14, 2008, 2:31 pm 2:31 pm

My Security Software is a subscription..//..it costs me $$40.00(USD)per year…and I have no problems with my PC-use..

Posted by: Mark S. M. | January 14, 2008, 2:34 pm 2:34 pm

Walker Evans ,
Agreed
It is true that the younger set is more prolific in use of the technology and not in the safeguards of it. It would seem that they really don’t care one way or the other, just as long as they get to keep using it.
Q: If your system is that secure, care to share a few of your ‘secrets’?
We can always learn from one another.
—-
Mark S. M.,
Subscriptions are good. But it is still up to you to make your security better, if not the best.
Most people don’t even realize that they probably have Spyware/Malware/or Viruses on their machines due to lack of experience in IT security, or “Don’t really care” attitude – until it is too late.
In my experience, don’t rely on any one solution. Have multiple if possible. And, above all – Back up, regularly.

Posted by: CousinIT | January 15, 2008, 3:44 pm 3:44 pm

Warrantless Wiretaps can bypass ALL
of that!

Posted by: joseph | January 17, 2008, 8:16 pm 8:16 pm

Their’s plenty of free security you can implament. free firewalls, free antiwpyware, free anti-virus protection. just do a search with the word free and see all the protection you can get. I am an internet tech and I agree it’s up too you to secure not ME. Their is no satisfactory excuse as to why no protection is used. one tip use a flash drive for billing. install browser on flash drive and do billing with that browser only.

Posted by: AdeebN | January 21, 2008, 3:15 pm 3:15 pm

everyone should sign up for an RFID chip in their arms.

Posted by: the man | January 25, 2008, 1:59 am 1:59 am

Ya great answer put a freakin chip in your arm and watch the malicious software do a number on you personally. Great plan, uh no thanks.

Posted by: horrified111111111 | January 26, 2008, 7:58 pm 7:58 pm

RFID…
Don’t worry, you won’t have a choice – eventually…

Posted by: Eventually | February 1, 2008, 1:25 pm 1:25 pm

Leave a Reply

Do you have more information about this topic? If so, please click here to contact the editors of ABC News.