Malware authors cut out attachments

Malware authors are shifting attack vectors from emails containing infected attachments to web pages embedded with malicious code, according to experts at Infosecurity Europe 2007.

Security firm Sophos is reporting that the traditional method of sending malware via attachment is now falling out of favour and that the authors can now bury the code in web pages and just send out links to that page.

"We are seeing an average of 5,000 infected web pages every day," said Graham Cluley, senior technology consultant at Sophos.

"Some days it goes as high as 20,000. Visit these sites, even if your browser is fully patched, and you run a risk of infection."

By exploiting vulnerabilities in the website server with a PHP attack or other technique, the malware author can imbed code in the site with little chance of detection.

Around 70 per cent of infected web pages are contained in legitimate sites from established companies.

"It is not just porn or gambling sites that are risky," said Carole Theriault, senior security consultant at Sophos.

"They are appearing everywhere, even in gardening sites. Content is no longer an indicator to risk."

PODCAST: Interview with Graham Cluley and Carole Theriault

See also:

Total malware volumes grow 'dramatically'

Malicious code writers target the web in earnest  25 Apr 2007

Chinese hackers wake up to malware

Criminal switch from copycats into malware authors  16 Mar 2007

Golf sites fall into malware sand trap

Spyware, adware and Trojan authors tap Ryder Cup zeitgeist  25 Sep 2006

Social networks riddled with malware

One in 600 profiles host infection  10 Aug 2006

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!