Web Hacking and Malware

Pete Prestipino — Mon, 17 Aug 2009 14:55:00 GMT

Breach Security announced a steep rise in attacks against social networking sites, according to the Web Hacking Incidents Database (WHID) 2009 Bi-Annual Report.

Social networking sites, accounting for 19 percent of hacking incidents, were the most targeted vertical market in the first half of 2009. Key findings from the WHID 2009 Bi-Annual Report include:

• Drivers for Web Hacking — Defacement, which combines both planting of malware and standard overt changes, remains the most common outcome of web attacks (28%), while leakage of sensitive information is a close second (26%, up from 19% in 2008). Disinformation is a distant third (19%), mostly due to the hacking of celebrity online identities.

• Most Prevalent Attack Vectors — SQL Injection remains the number one attack vector, accounting for nearly one-fifth of all security breaches (19%). Attack vectors exploiting Web 2.0 features such as user-contributed content were also commonly employed: authentication abuse was the second most active attack vector (11%), and Cross Site Request Forgery (CSRF) rose to number five with 5% of the reported attacks.

• Vertical Markets Under Attack — Social networking sites emerged as the most targeted vertical market with 19% of the incidents, a dramatic increase from prior years when this sector was not represented, and displacing government/law enforcement from the number one spot in 2008.

“The dramatic rise in attacks against social networking sites this year can primarily be attributed to attacks on popular new technologies like Twitter, where cross-site scripting and CSRF worms were unleashed,” said Ryan Barnett, director of application security research for Breach Security. “Looking back at 2008, a notable election year, government-related organizations were the top-ranked attack victims and have now dropped to number three. The WHID report demonstrates that hackers can be fickle, following popular culture and trends to achieve the most visible effect for their efforts, which means that companies must be vigilant in implementing web application systems and monitoring application activity.”

The WHID project compiles and analyzes application-related security incidents, focusing exclusively on publicly reported web application security attacks that have an identified outcome. The WHID 2009 Bi-Annual report analyzed global security incidents that occurred from January 1 through July 31, 2009, a 30 percent increase in overall web attacks compared to 1H 2008.

Looking to Accelerate Your Web Success?
Request a pro-level membership at WebsiteMagazine

Top Malware Threats in June 2009

Pete Prestipino — Tue, 07 Jul 2009 16:16:00 GMT

Windows security software provider Sunbelt Software released a list of the most prevalent malware threats for the month of June 2009.

Sunbelt Labs finds a surge in threat detections for the high risk threat Trojan-Spy.Win32.Zbot.gen, a family of password-stealing Trojan programs which is being distributed through SPAM (often as a file purporting to be an airline e-ticket, as a file attachment from "United Parcel of America," and one claiming to be an e-payment notification of an order with Amazon.com. The Trojan injects code from remote sites that harvest confidential data off a user's system including cached passwords, login credentials for web sites such as online banking sites, as well as data in certificates and cookies.

The following are the most prevalent spyware threats for the month of June.

1. Trojan-Spy.Win32.Zbot.gen: 7.19%
2. Trojan.DNSChanger.Gen: 2.66%
3. Trojan-Downloader.Zlob.Media-Codec: 2.63%
4. Trojan.1: 2.62%
5. BehavesLike.Win32.Malware (v): 2.59%
6. Exploit.PDF-JS.Gen (v): 2.19%
7. PersonalAntivirus: 1.52%
8. INF.Autorun (v): 1.45%
9. Trojan-Spy.Win32.Pophot.gen: 1.40%
10. Win32.Cekar.E: 1.40%

Stay up to date on important 'Net events like this and accelerate your Web Success!
Request a professional-level subscription to Website Magazine.

'Net Features : malware threats

Web Hacking and Malware

Top Malware Threats in June 2009