StopBadware Calls Malware Trends 'Worrisome'

By Ed Oswald | Published October 11, 2007, 3:08 PM

Malware on mainstream Web sites are becoming an increasingly larger problem as hackers are finding ways to infiltrate them, and place code that infects whomever visits the site.

StopBadware.org co-director Jonathan Zittrain called the trends worrisome, especially considering many webmasters are doing little -- if anything -- to stop it.

"Webmasters are not fully aware of the risks, nor are many of them convinced that it is their responsibility to contain them," Zittrain added. "Even if they are eager to clean up, they do not have easy places to turn to for help."

In its report released this month, the group said that a significant number of the new sites reported as containing badware were actually 'benign' sites that had been hacked without the knowledge of the website owner.

Two common ways to launch these attacks in the first half of 2007 were by loading a malicious IFRAME into a benign page, or through the use of JavaScript exploits, StopBadware said.

This is made possible through the rise in what the group calls "drive-by downloads," where the installation of the software occurs just by visiting an infected site.

Additional attacks seemed to be coming via social networking through the rise in spam profiles. StopBadware said many of these come with links to malicious sites, or attempt to place malicious code within the pages.

Currently StopBadware's list of malicious websites contains some 237,800 URLs.

Comments

View comments by with a score of at least

Seems like most decent antivirus vendors are now detecting malware the same as virus scanning. If your isn't time to change. Seems the biggest threat these days is from this kind of infection.

Score: 0

|

I haven't been infected by spyware or virus' with XP, but then I take precautions and do run anti-spyware/virus apps.
The only thing I'm concerned about is someone who was on XP who did the same but started to become "slack" with their precautions with Vista because they trust into its security features too much.
It's not a matter of if someone is going to find a way to infect Vista, it's a matter of when.
There's just too much money involved for the criminals to not infect Vista.

I really believe that these criminals/hackers could easily be put out of business by having those who use the internet etc. be a little more wiser, use the security features in the OS, use a firewall, anti-virus/spyware apps, users who don't are the ones who are infected. Just to think if they smartened up what's the claim something like 40% of all internet bandwidth is spam, so that would clear up now that would be sweat even if I would never notice with a speed increase :)

Score: 0

|

My machine(s) have been screwed in the past somply by visiting a site. That was with XP however, Vista simply doesn't let this happen.

Score: 0

|

You forget to add "Yet."

And you wouldn't have had a problem in XP with Firefox. :p

Score: 0

|

Make that firefox with the noscript plugin.

Score: 0

|

I use Maxthon and so do my parents. We never get any problems in regards to spyware etc. What does that mean?

Score: 0

|

A real beta process at work: Mozilla fires up Firefox 3.6 Beta 2

In the clearest sign yet that public input really does help the development process, a flurry of bug detections provoked Mozilla to release Beta 2 of the next Firefox.

Snow Leopard and Windows 7 still can't crack the netbook problem

Apple has killed Atom support in OS X 10.6.2 and Windows 7 Starter Edition is stripped of "basic" functionality.

Microsoft's Top 3 advances in Exchange Server 2010

The latest round of changes launched today will impact how admins deliver services to e-mail recipients, and how much companies will pay along the way.

Firefox turns five: Thanks for giving us a choice

Carmi Levy | Wide Angle Zoom: No longer the phoenix rising from the ashes, Mozilla has carried on more than just Netscape's legacy.

Kindle for PC opens in beta, underwhelms

Amazon has opened the beta of Kindle for PC, a companion to the Kindle, but little else.

European ministers approve watered-down 'neutral net' language

The latest provision in the EU's telecoms regulatory framework would let businesses cancel individuals' Internet access, if they go to court first.

It's the US vs. the EU over Oracle+Sun and the meaning of 'open source'

Now that the EU is a virtual country, the US Justice Dept. is taking a stand in favor of its view -- and against the EC's -- that MySQL will survive under Oracle.

Qualcomm: $1.3 billion Samsung licensing deal unrelated to fair trade violations

Samsung has come to a 15-year licensing deal with Qualcomm over 3G and 4G wireless technology.

Nokia's 'limited number' of recalled chargers exceeds 14 million

Today, the Finnish phone maker has begun a recall of mobile phone chargers that are a shock hazard.

Ubuntu 9.10 upgraders report frustration

For those Wine aficionados out there, beware of the remote possibility that your Linux system could be infected by Windows-seeking malware.

Supreme Court considers patentability of abstract methods today

Can software that executes a formula for a business process qualify for federal patents? An appeals court already said no, and inventors are making their case.