So Long Script Kiddies?
Information Security Magazine published an interesting article, So Long Script Kiddies by Lenny Zeltser. It makes the argument that Script Kiddies are "fading away" and profit motivated attackers are filling the void.
Browser malware that executes fraudulent financial transactions. Botnets so powerful they can knock Web sites offline for days. Drive-by infections that install keyloggers on the PCs of Web site visitors. Stealthy malware adept at self-preservation. M As organizations erect barriers to protect their data, attackers are unleashing new ways of finding and exploiting weaknesses. The threat landscape is one of professional, highly skilled online criminals who create, buy or trade advanced tools that allow them to steal confidential company data, disrupt business operations or snatch logon credentials and other personal information. The teen-aged script kiddies who focused on compromising systems for fame and game are receding into the distant past. Today's profit-minded attackers are more likely to carry a briefcase than a skateboard. M As defenders against these organized cybercriminals, security managers have inherent disadvantages.
Organizations are single entities with relatively static measures for protecting data--it takes time to adjust the IT security architecture, update personnel skills and deploy new defensive technologies. In contrast, the number of adversaries is virtually unlimited. If some of them happen to employ ineffective tactics, there are others who have developed attack vectors you may not have even considered.
