1. The Threat Landscape Jan 2013

2. 2013 Threat Report 2

3. What you can do with the Threat Report 3 Educate buyers how threats lead to both paths of Complete Security Create opportunities vs. Find opportunities Help your partners become security experts Learn 2-3 case studies and facts/stats from Threat Report

4. 1. Threat Volume SophosLabs see 250,000 new files each day 4 250,000 previously unseen files received each day within SophosLabs

5. 2. The malicious web Web servers are under constant attack. A new malicious URL every couple of seconds 20-30k malicious URLs seen each day. This is almost a new malicious URL every 2 secs

6. 3. Professionalism, crimeware ‘Monetization’ : the bulk of today’s threats are automated, coordinated & professional 6

7. Case study 1: Drive-by downloads 7

8. Controlling user traffic Inject redirects into legitimate sites Web threats are all about controlling user web traffic 80% of malicious URLs are actually legitimate sites that have been compromised

9. It’s all about traffic Distribution of today’s web threats (2012 H1)

10. Drive-by downloads Compromising legitimate websites to drive user traffic to malware

11. Drive-by downloads Compromising legitimate websites to drive user traffic to malware

12. Drive-by downloads Compromising legitimate websites to drive user traffic to malware

13. Drive-by downloads Compromising legitimate websites to drive user traffic to malware URL filtering Content detection

14. Case study 2: Ransomware 14

15. Ransomware Multi-lingual! 15

16. Ransomware Malware that locks/encrypts user data Pay ransom to access files 16 Simple Password protected archives Medium XOR shift Complex RC4 Public key crypto Recover data?

17. Blackhole payloads Payload distribution (late 2012) 17

18. Case study 3: Android Threats 18

19. Mobile OS market (US) What will mobile malware target? 19

20. Android Applications Significant growth Apps available Customer downloads

21. Android malware Huge growth in 2012 (x40, just in September!) 21 1000 Android samples analyzed each day within SophosLabs

22. Android vs PC 22

23. SophosLabs 23

24. SophosLabs Key differentiators 24 1.Integrated threat analysis 2.Fast response time 3.Global presence 24/7/365 4.Updates issued from any lab location at any time 5.100% in-house technology 6.Pre-configured intelligence

25. Top Facts 25 1,000 Android samples analysed each day within SophosLabs 80% of malicious URLs are actually legitimate sites that have been compromised 250,000 previously unseen files received each day within SophosLabs 20-30k malicious URLs seen each day. This is almost a new malicious URL every 2 secs

26. Top Facts 26

27. Mitigating Risks 27 Complete Security Solutions designed to mitigate risks

28. Questions? 28