Newsletter:

Skip Navigation LinksHome > News > Security > Hackers infiltrate legitimate websites

Hackers infiltrate legitimate websites

By Andrew Charlesworth
31 July 2008 07:57AM
Tags: hackers | infiltrate | legitimate | websites

Surfers who think they can avoid cyber-crime by sticking to reputable websites are fooling themselves.

Sixty of the 100 most popular websites have hosted malware of various kinds at some time in the past six months, according to a recent study.

The latest State of the Internet Report (PDF) from Websense warns that many popular social networking, search engine and web 2.0 sites have suffered temporary infection with cyber-tricks such as data-stealing code and hidden redirects.

"Attackers are forgoing creating their own malicious sites and targeting legitimate sites that have a built-in base of visitors," said Dan Hubbard, chief technology officer at Websense.

"There is an element of trust in the web 2.0 world that the sites we frequent every day are safe, but attackers are taking advantage of the 'good reputations' of sites to launch attacks."

The validity of the URL does not matter any more, according to Hubbard. "It is all about the dynamic content that is served up on the page," he said.

To use the internet safely, organisations need web security protection that can analyse content on the web page in real-time, he added.

Copyright © 2008 vnunet.com

   


Ads by Google


Thoughts on this article? Add a comment below.
Comments: 1
There's also the recent DNS poisoning issues - a slack or late patching ISP is just as dangerous as a compromised website. You could be attempting to visit a reputable and secure banking site but your ISP's DNS server has been poisoned, so you are re-routed to a phishing site that looks like the real deal (including the info in the address-bar).

E.g.
http://www.securityfocus.com/news/11529

Chris Fry
http://www.chris-fry.com
iTnews - comments icon Posted by Chris FryJul 31, 2008 12:51 PM
Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 


Tripwire - Click here to win an iTouch





Product Reviews

Star Rating
The Cyber-Ark Enterprise Password Vault, or EPV, is a high-end password management powerhouse.
Star Rating
The Hitachi ID-Archive sets its focus on password randomisation.
Star Rating
The Lieberman Software Enterprise Random Pass­word Manager is a full-on password manager and randomiser for...
Star Rating
Proginet SecurForce is a little bit of a horse of a different color for this month's Group Test.
Star Rating
On the surface, RoboForm Enterprise starts out looking like a single sign-on product, but that is just on the...
Unified Communications Podcast Centre

TopTopics
(6942) -  microsoft
(6474) -  iinet
(6465) -  copyright
(6465) -  afact
(6353) -  internet
(5920) -  servers
(5920) -  mipi
(4090) -  phone
(4085) -  telstra
(3658) -  nvidia
(3351) -  broadband
(3292) -  nbn
(2430) -  avg
(1970) -  onecare
(1886) -  google