Small business cybersecurity threats have become so common that the average website was attacked 44 times a day in the fourth quarter of 2017, according to a recent research study.

SiteLock’s “Website Security Insider: Q4 2017” found that randomly generated encoded malware represented 51 percent of malicious software detected. Backdoor files, JavaScript injectors and “defacements” — instances where sites are taken down or replaced with messages from cybercriminals — were also among the top small business cybersecurity issues reported during Q4 2017.

No Target Is Too Small for Cybercriminals

The report’s authors noted that there’s no such thing as an organization that’s “too small to be hacked.” They suggested that attacks against these organizations may be on the rise due to the proliferation of websites built with dynamic, database-driven applications, such as WordPress and Joomla, rather than static HTML. The relatively small number of files used to serve content means that a single vulnerability could create major opportunities for cybercriminals.

In general, WordPress sites using plugins were twice as likely to be compromised as non-CMS sites. In addition, the report illustrated the importance of keeping patches up to date, noting that 55 percent of infected WordPress sites were not running the current, most secure version.

Based on its analysis of more than 6 million websites, SiteLock concluded that small business cybersecurity risks increase as more social media connections, complex themes and other features are added to a website. These high-risk sites are 27 times more likely to be compromised, according to the report.

The nature of those risks are beginning to look a lot like those facing large enterprises: 25 percent of the threats blocked in the fourth quarter of 2017 were distributed denial-of-service (DDoS) attacks.

Shining a Spotlight on Small Business Cybersecurity

SiteLock isn’t alone in trying to raise awareness about small business cybersecurity threats. Verizon’s “2017 Data Breach Investigation Report” revealed that 61 percent of cyberattacks target small businesses. A report from the U.S. Securities and Exchange Commission (SEC), meanwhile, suggested that half of small businesses go out of business within six months of suffering a cybersecurity attack.

A cyberattack can devastate a small business. As small business security threats become more likely, companies need to make sure they are implementing proper security controls.

more from

From Ramnit To Bumblebee (via NeverQuest): Similarities and Code Overlap Shed Light On Relationships Between Malware Developers

A comparative analysis performed by IBM Security X-Force uncovered evidence that suggests Bumblebee malware, which first appeared in the wild last year, was likely developed directly from source code associated with the Ramnit banking trojan. This newly discovered connection is particularly interesting as campaign activity has so far linked Bumblebee to affiliates of the threat group ITG23 (aka the Trickbot/Conti…

X-Force 2022 Insights: An Expanding OT Threat Landscape

This post was written with contributions from Dave McMillen. So far 2022 has seen international cyber security agencies issuing multiple alerts about malicious Russian cyber operations and potential attacks on critical infrastructure, the discovery of two new OT-specific pieces of malware, Industroyer2 and InController/PipeDream, and the disclosure of many operational technology (OT) vulnerabilities. The OT cyber threat landscape is expanding dramatically and OT…