Hackers attack businesses, blogs and Web 2.0 sites

[~BD~]

IT security and control firm Sophos has published new research into the
first six months of cybercrime in 2008. The Sophos Security Threat Report
examines existing and emerging security trends and has identified that
criminals are increasingly using creative new techniques in their attempt to
make money out of internet users.

a.. Website infection rate three times faster than 2007
b.. Business websites attacked, office workers at risk, Web 2.0 introduces
new threats
c.. Nicole and Angelina bring danger via email
Full email article here:
http://www.sophos.com/pressoffice/news/articles/2008/07/security-report.html

 

[Milo]

So they say, No legitimate site is really safe! quite often they are being
injected with malicious script in broad daylight, We call it web threats as
the security evolve so as the threat landscape.

See this:
http://blog.trendmicro.com/xss-methods-also-seen-being-used-in-mass-compromises/

for the e-mail it just changed the attack vector.

"~BD~" <~BD~@nospam.invalid> wrote in message
news:O$Khwah8IHA.4988@TK2MSFTNGP04.phx.gbl...
> IT security and control firm Sophos has published new research into the
> first six months of cybercrime in 2008. The Sophos Security Threat Report
> examines existing and emerging security trends and has identified that
> criminals are increasingly using creative new techniques in their attempt
> to make money out of internet users.
>
> a.. Website infection rate three times faster than 2007
> b.. Business websites attacked, office workers at risk, Web 2.0
> introduces new threats
> c.. Nicole and Angelina bring danger via email
> Full email article here:
> http://www.sophos.com/pressoffice/news/articles/2008/07/security-report.html
>

 

[~BD~]

"Milo" <jfcoel@hotmail.com> wrote in message
news:0BBF6BDC-5EA7-4A9C-82CB-AD7FEA32301C@microsoft.com...
> So they say, No legitimate site is really safe! quite often they are being
> injected with malicious script in broad daylight, We call it web threats
> as the security evolve so as the threat landscape.
>
> See this:
> http://blog.trendmicro.com/xss-methods-also-seen-being-used-in-mass-compromises/
>
> for the e-mail it just changed the attack vector.
>

Thanks for responding Milo. The info at the link you provided is
interesting, albeit somewhat worrying.

Just imagine the havock that could be caused if folk on these newgroups were
directed ......... for help with cleaning their computers ........ to a web
site which held something malicious itself. How on earth would anyone know
this had happened? Something to think on! <wink>

I think this is something that Microsoft should check, perhaps on a random
basis - it might just help in the fight against Cybercrime.

Dave

 

[Root Kit]

On Wed, 30 Jul 2008 08:34:13 +0100, "~BD~" <~BD~@nospam.invalid>
wrote:

>The Sophos Security Threat Report examines existing and emerging security
>trends and has identified that criminals are increasingly using creative new
>techniques in their attempt to make money out of internet users.

Fantastic! - They managed to find out what has been publicly known for
years....