Symantec.com > Enterprise > Security Response > Internet Security Threat Report > View the Report > Highlights

Highlights

Threat Activity Trends | Vulnerability Trends | Malicious Code Trends | Fraud Actvity Trends

Threat Activity Trends

During this reporting period, the United States had the most overall malicious activity, with 19 percent of the total—down slightly from 20 percent in 2009, when it also ranked first.

The United States was the top country for originating network attacks in 2010, with 22 percent—down from 24 percent in 2009.

The average daily volume of Web-based attacks observed in 2010 was 93 percent higher than in 2009.

Attacks related to the Phoenix toolkit were the most prominent of the Web-based attack activities observed in 2010, with 39 percent of the top 10 activities observed.

Of the search terms that resulted in visits to malicious websites, 49 percent were in the adult entertainment category.

In 2010, the healthcare sector had the highest percentage of data breaches that could lead to identity theft, with 27 percent—an increase from 15 percent in 2009.

The financial sector was the top sector in 2010 for identities exposed in data breaches, with 23 percent—a decrease from 60 percent in 2009.

The leading cause of data breaches that could lead to identity theft in 2010 was the theft or loss of a computer or other data-storage device, with 36 percent of the total; this is nearly unchanged from its 37 percent total in 2009.

Hacking was the leading source of reported identities exposed in 2010 with 42 percent of the total—down from 60 percent in 2009.

The most exposed type of data in deliberate breaches (hacking, insider breaches, or fraud) was customer-related information, accounting for 59 percent of the total. Customer data also accounted for 85 percent of identities exposed in deliberate breaches.

Of malicious URLs observed on social networking sites during a three-month period in 2010, 66 percent made use of a URL shortening service; of these, 88 percent were clicked at least once.

The United States had the most bot-infected computers in 2010, accounting for 14 percent of the total—an increase from 11 percent in 2009.

Taipei was the city with the most bot-infected computers in 2010, accounting for 4 percent of the total; it also ranked first in 2009, with 5 percent.

In 2010, Symantec identified 40,103 distinct new bot command-and-control servers; of these, 10 percent were active on IRC channels and 60 percent on HTTP.

The United States was the location for the most bot command-and-control servers, with 37 percent of the total.

The United States was the most targeted county by denial-of-service attacks, with 65 percent of the total.