Cybercriminals targetting web-connected devices: Symantec

Cybercriminals are targetting the expanding network of Internet-connected devices like smart phones and CCTV cameras, security solution firm Symantec said.
While mobile devices will continue to attract cyber criminals, Symantec anticipated that commoditised 'plug and play' consumer devices like CCTV cameras and remote access controls for alarms, lighting and climate control will be exploited by cybercriminals in the coming year.
"(Cyber) attacks are becoming more sophisticated. All indications are that 2015 will bring more of the same, with the struggle between those wishing to create new threats and exploit vulnerabilities and those looking to protect against them likely to intensify," Symantec India President Sales Sanjay Rohatgi told PTI.

Advancements in Internet of Things (IoT) and smartphone penetration means consumers will bring increased connectivity across devices and machines.
"And with this connectivity, comes the potential for a whole new range of security risks. In 2015, we can expect attacks to get smarter and sharper," he added.
Cyber criminals are also expected to increase attacks on smartphones using fake apps.

"While many Internet users are reluctant to share banking and personal identifiable information online, others are willing to share information about their location, and mobile device battery life as well as allow access to photos, contact lists and fitness information, all in exchange for mobile apps," he said.

Highlighting threats around connected home automation devices, Rohatgi said while the embedded and small devices continue to become more prevalent, not many of these devices are deployed with Internet security in mind.
"We won't see any large-scale attacks leveraging IoT, but instead one-off attacks against connected devices like home routers, smart TVs and connected car apps, for example, for sensitive and private information," he added.
Also, with more and more data being hosted on remote data centres, businesses will need to take a closer look at data governance and ensuring their data is cleaned before it is hosted in the cloud.

For security experts, machine learning will be a game changer in the coming year, he said.
"Machine learning, a step towards artificial intelligence, can help stay 'proactive' against threats, instead of reacting to them. It will help predict cyberattacks and improve detection rates and may just be the key that reverses the trend on cybercrime," he added.
Symantec's solutions protect more than 200 million end points globally. It review more than 8.4 billion email messages and 1.7 billion web requests a day.