The hit list: What programs do hackers target?

Warrent Officer Mike Tillery, 69th Signal Battalion, watches as Spc. Christine Kaipat, 72nd Expeditionary Signal Battalion, attempts to set up a connection with the call manager during Cyber Endeavor, an exercise within Combined Endeavor 11 in Grafenwoehr, Germany, Sept. 14 2011. Combined Endeavor is the largest Theater Security Cooperation communications exercise in the world, combining 40 different countries from NATO, Partnership for Peace, and strategic partners.

Flash, Silverlight and Internet Explorer were heavily targeted by hackers in February, according to a report by cybersecurity firm NSS, probably because exploit techniques discovered in November made them easier to crack.

The source code and back-end data for the Rig exploit kit were also leaked online last month, “which gives interesting insight into which applications and operating systems were targeted,” NSS noted. Rig targets Flash, Silverlight and Internet Explorer, among other applications.

Cryptowall, a particularly nasty threat that encrypts the data on a target computer with a virtually uncrackable password that won’t open unless the user pays ransom, also saw a surge of activity.

Hacker prefer to target certain combinations of operating systems and applications, according to NSS. Rig focuses on Java, Flash, Silverlight and Internet Explorer running on Windows 7, 8.1 and XP.

The NSS study also found that Hong Kong topped the list of locations hosting hackers’ command and control servers, followed by South Korea, Russia and the United States.