Symantec Internet Security Threat Report: Social Engineering Facts

The Symantec Internet Security Threat Report includes vast information on security related issues, including social engineering facts.  Spam, phishing, and malware data is captured through a variety of sources.  These resources give Symantec’s analysts unparalleled sources of data with which to identify, analyze, and provide informed commentary on emerging trends in attacks, malicious code activity, phishing, and spam.  The result is the annual Symantec Internet Security Threat Report, which gives enterprises, small businesses, and consumers the essential information to secure their systems effectively now and into the future.

Threats to online security have grown and evolved considerably in 2012.  From the threats of cyber espionage and industrial espionage to the widespread, chronic problems of malware and phishing, the report identities constant innovation from malware authors.  Below are some key information related to phishing and another social engineering attacks.

• In 2012, the largest growth for targeted attacks was businesses with fewer than 250 employees.
• Businesses with less than 250 employees accounted for 31 percent of all attacks in 2012.
• The number of targeted attacks increased 42 percent in 2012.
• In 2012, SPAM still accounted for 69% of all email.
• 1 in 291 emails contained a virus in 2012.
• In 2012, 23 percent of email malware was delivered via a URL rather than an attachment
• The overall phishing rate was 1 in 414 emails in 2012.
• The number of phishing sites that spoofed social networks increased 123 percent in 2012.
• The number of phishing sites using SSL increased 46 percent in 2012.
• The number of web-based attacks in 2012 increased 30 percent.
• Manufacturing was the most targeted sector in 2012, at 24 percent.
• For 2012, knowledge workers were the most targeted employees of an attack, at 27 percent.
• The most targeted job role was in R&D, at 27 percent.
• Hackers accounted for 40 percent of all reported data breaches in 2012.
• At $194 the U.S. has the highest cost per capita for a data breach for 2012.