OREANDA-NEWS. November 16, 2015. 60% of businesses admitted experiencing at least one IT security incident which led directly to or related to financial fraud, according to Kaspersky Lab’s latest report based on Corporate IT Security Risks Survey results - a global survey of more than 5,500 company executives and professionals from 26 countries. Direct money loss due to cyber attacks is also a major topic on the business security agenda, with the importance of mitigating the risk of fraud on a par with such major issues as malware attacks and data leakage. Online fraud is perceived as complex and hard to prevent even by the banks themselves: they struggle to separate fraudulent actions from legitimate ones and are yet to decide who is responsible for attack mitigation and response.

Lack of uniform approach

The Corporate IT Security Risks survey confirms that online financial fraud is one of the most sensitive topics for businesses. Other types of cybersecurity breaches, even the most dangerous ones such as cyberespionage, may still provide enough time to mitigate risk. However, loss of money affects operations and reputation almost immediately. At the same time we observed that the perception of online fraud is sometimes far from realistic or as uniform as we would like it to be. Businesses have yet to decide upon who has ultimate responsibility for the prevention of such attacks. The scope of solutions aimed at securing financial transactions of any type is also not well defined: some companies rely on banks, some use third-party solutions in-house or develop their own routines, and some haven’t yet fully implemented a fraud prevention solution at all.

Main findings

  • 47% of businesses feel they need to improve their protection of financial transactions.
  • 27% of businesses carry out financial transactions using a mobile device. 59% used WiFi.
  • 72% of companies are looking for a financial services provider with a stronger security reputation.
  • Financial organizations themselves are yet to come up with the uniform approach on who is actually responsible for fraudulent actions against their customers. Popular options are: Banks’ IT department, Senior Management, Security Department or even Police or government.

Complexity of the threat

“While the most feared and frequently used method of online fraud attacks remains ‘good old’ phishing and malware, our experts see financial cyberattacks evolving into sophisticated state-of-the-art campaigns. To ensure reliable protection, security of many other entities has to be taken into account, such as mobile devices, WiFi networks and channels used for money transfers outside of the corporate perimeter. When complexity meets a lack of well-defined protection strategy, loss becomes inevitable. Businesses need to have a clear understanding of the threat, the strategy to prevent it, and the procedure and tools to mitigate it. The role of the security industry is therefore not only to provide new technology designed to prevent online fraud, but to share intelligence to help businesses define their strategy and shape the appropriate mitigation and response”, commented Ross Hogan, Global Head of the Fraud Prevention Division at Kaspersky Lab.

Kaspersky Lab’s report “Financial Fraud: The Impact on Corporate Spend”, the latest in IT Security Risks Special Report Series is available here. Click here to learn more about Kaspersky Lab’s corporate solutions designed to prevent online financial fraud.