StopBadware Calls Malware Trends 'Worrisome'

By Ed Oswald | Published October 11, 2007, 3:08 PM

Malware on mainstream Web sites are becoming an increasingly larger problem as hackers are finding ways to infiltrate them, and place code that infects whomever visits the site.

StopBadware.org co-director Jonathan Zittrain called the trends worrisome, especially considering many webmasters are doing little -- if anything -- to stop it.

"Webmasters are not fully aware of the risks, nor are many of them convinced that it is their responsibility to contain them," Zittrain added. "Even if they are eager to clean up, they do not have easy places to turn to for help."

In its report released this month, the group said that a significant number of the new sites reported as containing badware were actually 'benign' sites that had been hacked without the knowledge of the website owner.

Two common ways to launch these attacks in the first half of 2007 were by loading a malicious IFRAME into a benign page, or through the use of JavaScript exploits, StopBadware said.

This is made possible through the rise in what the group calls "drive-by downloads," where the installation of the software occurs just by visiting an infected site.

Additional attacks seemed to be coming via social networking through the rise in spam profiles. StopBadware said many of these come with links to malicious sites, or attempt to place malicious code within the pages.

Currently StopBadware's list of malicious websites contains some 237,800 URLs.

Comments

Seems like most decent antivirus vendors are now detecting malware the same as virus scanning. If your isn't time to change. Seems the biggest threat these days is from this kind of infection.

Score: 0

|

I haven't been infected by spyware or virus' with XP, but then I take precautions and do run anti-spyware/virus apps.
The only thing I'm concerned about is someone who was on XP who did the same but started to become "slack" with their precautions with Vista because they trust into its security features too much.
It's not a matter of if someone is going to find a way to infect Vista, it's a matter of when.
There's just too much money involved for the criminals to not infect Vista.

I really believe that these criminals/hackers could easily be put out of business by having those who use the internet etc. be a little more wiser, use the security features in the OS, use a firewall, anti-virus/spyware apps, users who don't are the ones who are infected. Just to think if they smartened up what's the claim something like 40% of all internet bandwidth is spam, so that would clear up now that would be sweat even if I would never notice with a speed increase :)

Score: 0

|

My machine(s) have been screwed in the past somply by visiting a site. That was with XP however, Vista simply doesn't let this happen.

Score: 0

|

You forget to add "Yet."

And you wouldn't have had a problem in XP with Firefox. :p

Score: 0

|

Make that firefox with the noscript plugin.

Score: 0

|

I use Maxthon and so do my parents. We never get any problems in regards to spyware etc. What does that mean?

Score: 0

|

Before it can tackle Windows, Chrome must leave Safari in the dust

It's a little browser with dreams of becoming a bigger operating system some day. But while it's chasing Microsoft's dreams, Chrome's tail is being chased by Apple.

Silverlight 3 goes live on Microsoft's servers

Microsoft's answer to Adobe's Flash is (unofficially) here, with prospects of higher-speed, higher-resolution video and for the first time, 3D.

Best Buy-brand TVs to get TiVo

A new alliance will place the retailer's own brand alongide the manufacturers, and could also lead to future partnerships on services.

Three Android phones on the way from T-Mobile in 2009

T-Mobile's myTouch 3G, launched Wednesday, will be followed by two more Android phones later this year, but neither of them will be HTC's Hero.

LTE still lacks a voice

The 4G Wireless standard that Verizon hopes to show off before this year is out is still at a loss for (spoken) words.

T-Mobile's strategy to combat Apple's iPhone with Android

With a trio of Android phones now in the pipeline for 2009, T-Mobile hopes to break the iPhone's emerging stranglehold.

EC's Reding: Government should act as broker for media downloads

If Internet media services don't step up and build an attractive way for users to start paying for downloads, a commissioner says, government may do the job instead.

Sony TVs get Netflix, still no PS3

Though it's coming in behind LG, Samsung, and Microsoft, Sony will begin to offer Netflix streaming, too.

Google Chrome OS: Too little, too early

Carmi Levy: Wide Angle Zoom Don't start the revolution just yet, says Carmi, who isn't so certain Chrome OS will be the "Windows Killer."

GAO pen test brings the hammer down on federal rent-a-cops

But are the computers to blame for the contract-guard fiasco at FPS?

What's Next: Chrome OS will have at least some friends in high places

Also: South Korea takes another round of DDoS abuse, and Neelie Kroes and Steve Ballmer may shake hands before she exits stage left.

Data sharing among online advertisers: Is sanity in sight?

Lockdown with Angela Gunn In the middle of a 15-page plea not to get regulated, a spark of smart thinking.

PST Recovery Software 12.0

July 9 - 11:34 PM ET

Unistal Data Recovery 12.08.06

July 9 - 11:09 PM ET

BKF Repair 3.0

July 9 - 10:54 PM ET

Vuze for Windows 4.2.0.4

July 9 - 6:26 PM ET

UltraVNC 1.0.6.4

July 9 - 6:05 PM ET

WildBit Viewer 5.5 Beta 3.0

July 9 - 5:44 PM ET