With the expansion of reliable high-speed internet, the number of connected computers increased dramatically. Because malware could now spread directly through the internet, threat actors no longer needed to rely on physical disks to distribute viruses.
To better understand modern threats in the digital age, let’s look at two notable internet-reliant attacks: the LoveLetter attack and the Equifax breach.
1. The LoveLetter Attack (2000)
- The Origin: Created by Onel De Guzman to steal internet login credentials.
- The Mechanism: Users received an email with the subject line “I Love You” containing an attachment labeled “Love Letter For You”. When opened, the malware scanned the user’s address book, automatically sent itself to everyone on the list, and installed a program to harvest passwords and user data.
- The Impact: It infected 45 million computers globally and caused over $10 billion in damages.
- The Legacy: This was the first major example of social engineering a manipulation technique that exploits human error to gain private information, access, or valuables.
As social media continues to grow and publicize personal data, social engineering tactics are on the rise. Because many people prioritize convenience over privacy, these tools can lead to increased vulnerabilities if used improperly. To combat this, security professionals frequently conduct internal employee training specifically focused on identifying phishing emails, which use digital communications to trick people into revealing sensitive data or installing malware.
2. The Equifax Breach (2017)
- The Origin: Attackers successfully infiltrated the major credit reporting agency Equifax, resulting in one of the largest data breaches of sensitive information in history.
- The Scale: Over 143 million customer records were stolen, affecting approximately 40% of all Americans. Stolen records included personally identifiable information (PII) such as social security numbers, birth dates, driver’s license numbers, home addresses, and credit card numbers.
- The Failure: The breach happened due to multiple company failures rather than just a single vulnerability. Equifax failed to act on fixing multiple known vulnerabilities in the months leading up to the attack.
- The Fallout: Equifax ultimately settled with the U.S. government, paying over $575 million to resolve customer complaints and cover required fines. This massive financial penalty served as a wake-up call to corporations worldwide regarding the severe financial impact of a data breach and the absolute necessity of preventative measures.
