Malware soars in first half of 2008

By

The amount of web-based malware blocked by IT security firm ScanSafe has jumped by 278 per cent in the first six months of this year.


The amount of web-based malware blocked by IT security firm ScanSafe has jumped by 278 per cent in the first six months of this year.

The security firm found that the number of legitimate websites being compromised exploded in June, accounting for 66 per cent of all malware blocked.

"The mass compromise of websites poses particular challenges to corporate users," said Mary Landesman, senior security researcher at ScanSafe.

"The affected sites are typically known, legitimate and trusted sites with a business purpose. These are sites that users visit frequently, and the attacks are so stealthy and unobtrusive that most visitors don't know that they've been infected."

ScanSafe's latest Global Threat Report said that this widespread compromise of legitimate websites is largely the result of automated attack tools which became freely available in the last months of 2007.

The research found that SQL injection attacks are by far the most popular form of website compromise, outpacing others by 212 per cent and accounting for 76 per cent of all compromised sites.

When it comes to payloads, most of the compromises attempt to install password stealers and Trojans. This category of malware increased from four per cent of malware in January to 27 per cent in June.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

International Criminal Court hit by cyber attack

International Criminal Court hit by cyber attack

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

Log In

  |  Forgot your password?