Malware wars: Are hackers on top?
236595
A view from the trenches The money made from malware is eclipsing the revenue of anti-virus vendors, a leading net security vendor claims. Raimund Genes, CTO of anti-malware at Trend Micro, cites FBI figures that IT security problems cost the economy $62bn last year against IDC estimates that the anti-malware market was worth $26bn in 2005.â¦
246704
The security threats against business-technology systems continue to multiply. Not only do malicious worms and viruses such as Blaster and Bagle continue to wreak havoc, but security pros
35029
Unpatched vulnerabilities may leave computers open to remote attacks.
310585
Last year we explored the question of Microsoft&#39;s potential liability for software flaws exploited by viruses and other forms of malware.
541256
The numbers of malicious programs circulating online is reaching 'epidemic' levels, say experts.
517001
Hi-tech viruses and malicious software programmes -- or malware -- commonly infect computers the world over: filling mail boxes with spam, deleting e-mail addresses, damaging machines and costing billions to corporations.
423473
Search sites are getting wiser about not directing users to malware-loaded pages, but some companies do a better job of weeding out the garbage than others, according to a new study from McAfee. Two topics are particularly likely to lead to scum-infested sites.
158022
In recent years, buffer overflows topped the list as the most popular vulnerability used by hackers to compromise websites. However, the latest report from Mitre Corp., a U.S.
729820
Scammers and hackers are targeting the human factor in system setups. Part of a series on hot security topics.
389353
Bot software that turns PCs into zombies spreads via holes in Symantec and Microsoft products.
532297
(InfoWorld) - Financially motivatedÂ malwareÂ attacks areÂ on the rise,Â with automated software packages making it easy for unskilled hackers to earn a living by sending out spam, researchers at messaging security vendor Secure Computing say. A malware kit calledÂ MPack,Â released by Russian hackers last December, allows pretty much anyone with $200 to become a master spammer because it is easy to use and exploits vulnerabilities in FireFox, Internet Explorer and Apple's QuickTime, says Dmitri Alperovitch, principal research scientist for Secure Computing. The trend that "kind of defines 2007" is the convergence of traditional e-mail with Web-based attacks, in which message recipients are prompted to click on links to malicious Web sites, rather than to download attachments, Alperovitch says. "Certainly, exploiting Web browser vulnerabilities has been common. We've seen that for a long time," he says. "Now we're seeing that capability being merged with traditional e-mail worms that sort of blanket the Internet." Information-stealing malware now accounts for 10 percent of all threats, up from 8 percent in January, new research from Secure Computing has found. Trojans comprise 63 percent of all newly discoveredÂ malware, up from 58 percent in January. SpywareÂ and phishing are also becoming more problematic as attackers use more targeted attacks to steal personal and financial information. "The barriers to entry into cyber crime have been lowered so much," Alperovitch says. "People are realizing that they can make very serious money with almost no accountability, almost complete anonymity." Quoting the analyst firm Gartner, Secure Computing's researchers say that 75 percent of enterprises will be infected by "undetectable professional-grade malware" by year-end. About 90 percent of all e-mail is malicious, but that figure will rise as the holiday season gets closer, according to Alperovitch. "There's a good chance we'll reach 95 percent, maybe higher, of all e-mails being malicious by the end of the year," he says. As the storm worm showed, the automation of online attacks is allowing the creation of more botnets, he says. E-mail delivery mechanisms are also being optimized to bypass spam filters. Unfortunately, many Web surfers are far too trusting. "If you're walking down the street and someone asks you for your Social Security number or your bank account pin, you're not going to give it to them," Alperovitch says. "Yet on the Internet, people freely give them out to anyone who sends them an e-mail message." Here are some key security trends and events identified by Secure Computing in the first eight months of 2007: -- TheÂ Storm worm,Â named after subject lines like "230 dead as storm batters Europe," and similar worms became widespread in January and the following months, with new variants being created every 15 minutes. -- A password-stealingÂ Trojan hit visitors to the Miami Dolphins' stadium Web siteÂ during the Super Bowl, when attackers took advantage of a vulnerability in Internet Explorer's rendering of vector markup language documents. -- A mass-email with pictures of Britney Spears and Paris Hilton in April lured people to a Web site that hosted a zero-day exploit related to Windows' handling of animated cursor files. Microsoft released a patch to fix the vulnerability. -- More than 10,000 European Web sites hosted malware attacks in June after being compromised. "Hidden IFRAME's" were injected into the Web sites, referring visitors to malicious sites using MPack to deliver banking Trojans. -- So-called backdoor Trojans affect home users around the world, including nearly 100,000 PCs now infected by a new wave of storm malware. "The mailings that came with subject lines such as 'You've received a postcard from a family member!' directed users to Web-hosted exploits for several different vulnerabilities; they infect users' computers and attach them to the Storm family's P2P botnet," Secure Computing writes. Network World is an InfoWorld affiliate.
73968
According to the Symantec report, there is a sharp rise in so-called &quot;bot networks&quot; of compromised PCs that are used by hackers to launch denial-of-service attacks.
283353
Web War I: A rogue botnet crashes Estonia's internet. But a savvy politico, international cybercops, a secret society and just plain serendipity fend off the attack. It can't happen here? Don't bet on it.
187566
Infected computers can be used as &quot;zombies&quot; to send spam or launch attacks on Web sites. Spreading Trojans via chat rooms is not unusual.
756552
Criminals deploy zombies herded into netwoks of a few hundred to more than half a million compromised PCs. Uses vary from the simply annoying (spam attacks) to the unsavory and criminal.
684924
Spyware is rife and virus infection commonplace yet many home users reckon they are safe from online threats. An AOL/National Cyber Security Alliance (NCSA) Online Safety Study - conducted by technical experts
564338
A rootkit based on proof-of-concept code presented at 2005's Black Hat conference is currently infecting thousands of Windows-based PCs, and researchers say it's a remarkably sophisticated -- and hard-to-eradicate -- infection.