Wednesday, December 23, 2015

Data security risks rising for Chinese firms

Based on a study by PwC, Chinese companies tackled an average of 1245 information safety cases in 2015, a 517% year-on-year increase over last year.

Customer data, internal records, and intellectual property owned by energy, retail, technology, and engineering companies were the most targeted.

In addition, wider adoption of emerging IT solutions such as the Internet of Things increased the chances of data leakage, as more data are transmitted from portal devices and over wireless networks.

The survey also found that Internet security budgets for Chines companies neared $8 million in 2015, significantly higher than the global average of $5.1 million.

Online data leakage and damage cost China-based firms $2.63 million in 2015, a 10 percent jump over 2014. The amount is also higher than the global average of $2.55 million, because cyber-security incidents involving the cash-rich Chinese Internet companies usually entail high financial losses.

The results are based on a survey of more than 330 chief executives, financial officers, and IT professionals working in mainland China or Hong Kong. 

Wednesday, November 25, 2015

DDoS has become a big business in China


Based on a research published by Tencent Research Institute, in China, DDoS attacks now "employs" about 380,000 people in China, with more than 6000 hacking groups, and revenue to the north of RMB$10 billion ($1 = 6.39RMB as of Nov. 25, 2015).

Typical scenarios of a DDoS attack in China include:
- Business competition: one would hire these hackers to attach the website or IT system of a competitor.
- Blackmail: one would attack a business until some ransom money is paid.

People make money by:
- Sell DDoS tools
- Execute attacks
- Be the middle man.

(Source is in Chinese: http://mp.weixin.qq.com/s?__biz=MjM5OTE0ODA2MQ==&mid=400673180&idx=1&sn=ed89dbe28196c9fea6d9c05c466740af&scene=5&srcid=1125DUtCuEyO5DNOtemTqyAM#rd)