Magecart Strikes Again
Ticketmaster, British Airways, and Newegg have all been compromised. Who’s next? Read our research to see how we discovered the breaches.
IDG Connect: 2017 State of Enterprise Digital Defense Report
Findings quantify the security management gap and business impact of external web, social, and mobile threats.
Get the Research Report
Frost & Sullivan: The Digital Threat Management Platform Advantage
The material benefits of a platform-based approach to security outside the firewall.
Read the Report
2018 Holiday Shopping Season Threat Activity: A Snapshot
The 2018 holiday shopping season was the largest ever for online retailers, but threat actors filled their pockets, too.
So what did the threat activity around this shopping frenzy look like?
Rackspace Accelerates External Digital Threat Investigation with RiskIQ PassiveTotal
Download Case Study
EMA Radar™ Q4 2017 Report
RiskIQ ranked a technology and value leader in digital threat intelligence management.
Get the Analyst Report
July 12, 2018
New Report Details Five ways Hackers are Cashing in on Organizations’ Lack of Visibility into their Internet Presence
SAN FRANCISCO – July 12, 2018 – RiskIQ, the global leader in digital threat management, today released a report mining the company’s massive repository of internet data. The report maps the global internet attack surface over a two-week period, and in the process, reveals the true extent of the modern corporate digital attack surface.
The report, ‘The Anatomy of a Digital Attack Surface: Five Ways Hackers are Cashing In’ is a data-driven exploration of five different approaches hackers take to target businesses via the internet. They capitalize on the weakening of the corporate perimeter due to customer and partner interactions moving online. The report is based on data collected by RiskIQ’s web-crawling infrastructure, which each day executes and analyzes more than two billion HTTP requests, takes in terabytes of passive DNS data, collects millions of SSL Certificates, and monitors millions of mobile apps. When viewed as a whole, this data gives a new perspective of the sheer number of digital assets exposed to the internet, any of which could become a target for hackers.
“Today, organizations are responsible for defending their network all the way to the edges of the internet,” said Lou Manousos, RiskIQ CEO. “Bringing the massive scope of an organization’s digital attack surface into focus helps frame the challenges faced by organizations in keeping their employees, customers, and brand safe.”
By showing what their organization looks like from an attacker’s perspective—a collection of digital assets that are discoverable by hackers—the report illustrates that today’s security teams are not only responsible for their own network, but also everything that targets their brand and assets on the open internet. When brands understand what they look like from the outside-in, they can begin developing a digital threat management program that allows them to discover everything associated with their organization on the internet, both legitimate and malicious.
1. The Global Attack Surface is much bigger than you think: RiskIQ observed 3,495,267 new domains (249,662 per day) and 77,252,098 new hosts (5,518,007 per day) across the internet over a two week period, each representing a possible target for threat actors.
2. Sometimes hackers know more about your digital attack surface than you do: Looking at the digital attack surfaces of FT30 companies, each organization had on average 120 websites with a potential critical Vulnerability or Exposure (CVE) and 228 websites with a potential high CVE.
3. The hidden digital attack surface: Hackers don’t have to compromise your assets to attack your organization or your customers: In Q1 2018, RiskIQ identified 26,671 phishing domains impersonating 299 unique brands
4. The mobile digital attack surface: You have much more to worry about than just the Apple and Google Play mobile app stores: RiskIQ discovered 21,948 blacklisted mobile apps across 120 mobile app stores and the open internet.
5. Cryptocurrency Miners are the latest digital attack surface compromise: RiskIQ found 50,000+ websites have been observed running Coinhive in the past year.
To view the rest of these stats, download the report here: https://www.riskiq.com/research/anatomy-of-an-attack-surface/
RiskIQ is the leader in digital threat management, providing the most comprehensive discovery, intelligence, and mitigation of threats associated with an organization’s digital presence. With more than 75 percent of attacks originating outside the firewall, RiskIQ allows enterprises to gain unified insight and control over web, social and mobile exposures. Trusted by thousands of security analysts, RiskIQ’s platform combines advanced internet data reconnaissance and analytics to expedite investigations, understand digital attack surfaces, assess risk and take action to protect the business, brand and customers. Based in San Francisco, the company is backed by Summit Partners, Battery Ventures, Georgian Partners and MassMutual Ventures.
Visit https://www.riskiq.com or follow us on Twitter. Try RiskIQ Community Edition for free by visiting https://www.riskiq.com/community/.
© 2018 RiskIQ, Inc. All rights reserved. RiskIQ is a registered trademark of RiskIQ, Inc. in the United States and other countries. All other trademarks contained herein are the property of their respective owners.
Front Lines Media