StopBadware Calls Malware Trends 'Worrisome'

By Ed Oswald | Published October 11, 2007, 3:08 PM

Malware on mainstream Web sites are becoming an increasingly larger problem as hackers are finding ways to infiltrate them, and place code that infects whomever visits the site.

StopBadware.org co-director Jonathan Zittrain called the trends worrisome, especially considering many webmasters are doing little -- if anything -- to stop it.

"Webmasters are not fully aware of the risks, nor are many of them convinced that it is their responsibility to contain them," Zittrain added. "Even if they are eager to clean up, they do not have easy places to turn to for help."

In its report released this month, the group said that a significant number of the new sites reported as containing badware were actually 'benign' sites that had been hacked without the knowledge of the website owner.

Two common ways to launch these attacks in the first half of 2007 were by loading a malicious IFRAME into a benign page, or through the use of JavaScript exploits, StopBadware said.

This is made possible through the rise in what the group calls "drive-by downloads," where the installation of the software occurs just by visiting an infected site.

Additional attacks seemed to be coming via social networking through the rise in spam profiles. StopBadware said many of these come with links to malicious sites, or attempt to place malicious code within the pages.

Currently StopBadware's list of malicious websites contains some 237,800 URLs.

Comments

View comments by with a score of at least

Seems like most decent antivirus vendors are now detecting malware the same as virus scanning. If your isn't time to change. Seems the biggest threat these days is from this kind of infection.

Score: 0

|

I haven't been infected by spyware or virus' with XP, but then I take precautions and do run anti-spyware/virus apps.
The only thing I'm concerned about is someone who was on XP who did the same but started to become "slack" with their precautions with Vista because they trust into its security features too much.
It's not a matter of if someone is going to find a way to infect Vista, it's a matter of when.
There's just too much money involved for the criminals to not infect Vista.

I really believe that these criminals/hackers could easily be put out of business by having those who use the internet etc. be a little more wiser, use the security features in the OS, use a firewall, anti-virus/spyware apps, users who don't are the ones who are infected. Just to think if they smartened up what's the claim something like 40% of all internet bandwidth is spam, so that would clear up now that would be sweat even if I would never notice with a speed increase :)

Score: 0

|

My machine(s) have been screwed in the past somply by visiting a site. That was with XP however, Vista simply doesn't let this happen.

Score: 0

|

You forget to add "Yet."

And you wouldn't have had a problem in XP with Firefox. :p

Score: 0

|

Make that firefox with the noscript plugin.

Score: 0

|

I use Maxthon and so do my parents. We never get any problems in regards to spyware etc. What does that mean?

Score: 0

|

Will Firefox beat IE9 to Direct2D rendering?

Just days after Microsoft executives gave conference attendees a peek at a new rendering technology, a Mozilla contributor revealed he's working on the same thing.

AOL's decision to rebrand as Aol. takes a bad brand and makes it worse

The idea behind the social Web is to crowd source before bringing out something new. But not at AOL, which new logo debuted with a cry of "fail!" across the blogosphere and Twittersphere today.

Microsoft's Bob Muglia and Ray Ozzie on Silverlight vs. standards

Bob Muglia: "We're trying to provide people with an environment that has capabilities that you just simply can't do today in the standards-based world."

Uh-oh, netbooks -- not Windows 7 -- will lift 2009 PC sales

Santa may bring a lump of coal to the Windows PC industry this holiday season. Netbook sales will sap PC margins, while weak Windows 7 PC sales could further drive down average selling prices.

Kindle 2 update adds battery life, native PDF reader

Amazon has pushed out an update to the Kindle 2 e-reader that lengthens battery life and adds a native PDF viewer.

Safari on iPhone gets competition from a $1 browser app

Apple likes to say it gives iPhone users a full browsing experience, but a new competitor tries to incorporate more desktop browser features.

Action Replay maker sues Microsoft for Xbox 360 'predatory technological barriers'

Third-party video game accessory maker Datel has filed an antitrust lawsuit against Microsoft over the Xbox 360's recent Dashboard update.

Where there's smoke: Apple warranty stance raises troubling questions

Carmi Levy | Wide Angle Zoom: Smoking can be dangerous not only for your lungs, it appears, but for your Apple hardware warranty.

Microsoft's .NET Micro Framework is now free and open source

The latest version of Microsoft's .NET Micro framework is now in the hands of the FOSS community.

Google's value proposition for Chrome OS: Should we feel insulted?

For a search engine that has direct access to all the world's online history, it appears to have taught Google nothing about selling a machine.

E-book readers will be in short supply this holiday season

E-readers are hot this year, and a lot of compelling new products have been released, but are there enough electrophoretic displays to go around?