Cybercriminals target New Markets

in Security

Over the last few years, the concept of sustainable business practices has gained momentum leading to new markets such as carbon emission trading. Carbon markets encourage investments in low carbon technologies, which would eventually lead to reduction in carbon emissions. These markets also enable countries to reach the targets set under the Kyoto protocol. However, information security infrastructure in such new markets has not yet fully evolved.

A recent report by PricewaterhouseCoopers (PwC) indicates that cybercriminals are now targeting new markets to exploit the flaws in information infrastructure. Recently, many participating national registries of European Union Emissions Trading System (EU ETS) suffered security breaches. Cybercriminals intruded into the national registries of countries such as Czech Republic, Greece and Austria among others. The attackers allegedly made unauthorized transfers of around two million EU emission allowances (EUAs), equivalent to over 28 million euros from some of the trading accounts. Some reports have suggested even higher losses. Trading was suspended for a few days as a result of the security breach. The PwC report on green fraud risks states that recent attacks were carried out by organized cybercrime rings possibly based in European Union region.

Regular security evaluation of the IT infrastructure through penetration testers may facilitate timely detection and mitigation of security lapses.

IT professionals associated with the new markets may update themselves on the latest security threats and best practices for preventing threats by undertaking IT training programs and attending seminars.

Similar attacks were carried out last year by cybercriminals. The attackers reportedly sent phishing emails to employees of several companies. The e-mails appeared to have been sent by seemingly legitimate, but fake registries. The e-mails requested users to re-register their accounts. Unwary employees working at some German companies responded to e-mail and disclosed the required information. Using the provided information, attackers breached the accounts of the victims and transferred unit’s equivalent to over 3 million euros. Romania’s national registry also suffered security breach resulting in unauthorized transfer of around 1.6 EUAs.

Threats in the cyberspace are vibrant and attackers may launch more sophisticated attacks on carbon and other green markets. Trading registries must improve the information infrastructure to deal with the vibrant cyber threats. Organizations must create awareness among the employees through cyber security and online training programs. Trading registries must frame guidelines on information security and monitor their implementation to prevent intrusions and security breach incidents.

Author Box
Contact Press has 60 articles online
The International Council of E-Commerce Consultants (EC-Council) is a member-based organization that certifies individuals in cybersecurity and e-commerce skills. It is the owner and developer of 16 security certifications, including Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT). Its certificate programs are offered in over 60 countries around the world.

EC-Council has trained over 80,000 individuals and certified more than 30,000 members, through more than 450 training partners globally. These certifications are recognized worldwide and have received endorsements from various government agencies including the U.S. federal government via the Montgomery GI Bill, Department of Defense via DoD 8570.01-M, National Security Agency (NSA) and the Committee on National Security Systems (CNSS). EC-Council also operates EC-Council University and the global series of Hacker Halted security conferences The global organization is headquartered in Albuquerque, New Mexico.
Add New Comment

Cybercriminals target New Markets

Log in or Create Account to post a comment.
     
*
*
Security Code: Captcha Image Change Image
This article was published on 2011/02/22