In 2014, cybercriminals, using increasingly rapid and deceptive attacks, targeted the financial sector to stole massive amounts of data from major institutions, according to Mountain View, Calif.-based Symantec's Internet Security Threat Report.

Other highlights: Twenty percent of financial, insurance and real estate companies were at risk of spear-phishing attacks in 2014, similar to the 2013 rate; 30% of finance workers were targeted with spear-phishing attacks, where emails were frequently sent requesting payment by credit card or the completion of a wire transfer; and, financial information was the fourth most common type of information exposed in 2014.

"Attackers don't need to break down the door to a company's network when the keys are readily available," Kevin Haley, director, Symantec Security Response said in a release. "We're seeing attackers trick companies into infecting themselves by 'Trojanizing' software updates to common programs and patiently waiting for their targets to download them—giving attackers unfettered access to the corporate network."