TREND MICRO LEGAL DISCLAIMER The information provided herein is for general information and educational purposes only. It is not intended and should not be construed to constitute legal advice. The information contained herein may not be applicable to all situations and may not reflect the most current situation. Nothing contained herein should be relied on or acted upon without the benefit of legal advice based on the particular facts and circumstances presented and nothing herein should be construed otherwise. Trend Micro reserves the right to modify the contents of this document at any time without prior notice. Translations of any material into other languages are intended solely as a convenience. Translation accuracy is not guaranteed nor implied. If any questions arise related to the accuracy of a translation, please refer to the original language official version of the document. Any discrepancies or differences created in the translation are not binding and have no legal effect for compliance or enforcement purposes. Although Trend Micro uses reasonable efforts to include accurate and upto-date information herein, Trend Micro makes no warranties or representations of any kind as to its accuracy, currency, or completeness. You agree that access to and use of and reliance on this document and the content thereof is at your own risk. Trend Micro disclaims all warranties of any kind, express or implied. Neither Trend Micro nor any party involved in creating, producing, or delivering this document shall be liable for any consequence, loss, or damage, including direct, indirect, special, consequential, loss of business profits, or special damages, whatsoever arising out of access to, use of, or inability to use, or in connection with the use of this document, or any errors or omissions in the content thereof. Use of this information constitutes acceptance for use in an “as is” condition. ORGANIZATION OF AMERICAN STATES LEGAL DISCLAIMER The information and arguments expressed in this report do not necessarily reflect the official views of the Organization of American States or the governments of its Member States. Contents Introduction...........................................................................................................1 OAS Country Survey Results............................................................................... 2 Trends Seen...................................................................................................3 General Trends........................................................................................ 3 ICS Concerns.......................................................................................... 4 Country Reports on Cybercrime.................................................................... 6 Cybercrime Trends in Chile..................................................................... 6 Cybercrime Trends in Colombia.............................................................. 6 Cybercrime Trends in Jamaica................................................................ 7 Cybercrime Trends in Mexico.................................................................. 7 Cybercrime Trends in Panama................................................................ 7 Trend Micro Global Threat Intelligence Analysis.................................................. 9 Malware.........................................................................................................9 Spam............................................................................................................ 11 Malicious URLs............................................................................................12 Underground Activity..........................................................................................12 Online Banking Theft and Crimeware Use................................................... 12 Cybercriminal Underground......................................................................... 14 PiceBOT.......................................................................................................16 State of Cybersecurity in the Americas.............................................................. 18 Government Cybersecurity Policies............................................................. 19 Inter-American Cybersecurity Efforts........................................................... 20 Case Studies................................................................................................20 Argentina...............................................................................................20 Colombia...............................................................................................20 Jamaica.................................................................................................21 Mexico...................................................................................................21 Panama.................................................................................................22 Conclusion..........................................................................................................22 State of Government Response to Cybercrime........................................... 23 State of Internet Use.................................................................................... 24 State of the Threat Landscape..................................................................... 24 State of the Attack Landscape..................................................................... 25 State of the Cybercriminal Underground...................................................... 25 Recommendations....................................................................................... 25 References.........................................................................................................26