Malware Dramatically Increasing; Almost All Users Have Clicked on Malicious Links

Web security services firm ScanSafe reported that the total number of Web-based malware blocks has increased by 87 percent in July 2008 compared to the previous month. Specifically, the first two weeks in July have shown an extraordinarily high volume of malware blocks. ScanSafe sells online security services, which scan Web requests from its customers and blocks malicious content.

The company said the increase in Web-based malware was driven by the ongoing compromise of Web sites, which represented 83 percent of all malware blocks for the month. The increase was largely the result of the continued SQL injection attacks, which were responsible for 75 percent of all malware blocks in July 2008. As a result, July has had an overwhelming number of malware blocks--34 percent more blocks than the whole of 2007.

"In June 2008 we reported a 278 percent increase for the first six months of the year. That alarming trend has continued with the number of Web-based malware blocks exploding in the first two weeks of July," said Mary Landesman, senior security researcher at ScanSafe.

July 2008 also saw an increase in social engineering e-mail scams designed to install malware--including backdoor Trojans and rogue scanners--on victims' computers. According to the report, 95 percent of ScanSafe customers fell for the scams and attempted to click through to the malicious sites. The malware scanning service blocked customers from inadvertently getting to the malicious content.

"Although this may not seem like a high percentage, it is extremely significant given that these scams are now able to get past spam filters, which typically provide a high level of protection from this type of socially engineered malware," Landesman said. "It is disconcerting that cyber criminals are becoming increasingly sophisticated in creating these scams, so much so that more and more people are falling for them."

The ScanSafe "Global Threat Report" (PDF) is based on an analysis of more than 10 billion Web requests the company scans each month on behalf of business customers in over 60 countries across five continents.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • Digital clouds with data points and network connections

    Microsoft Makes Windows 365 Cloud Apps Available for Public Preview

    Microsoft has announced that Windows 365 Cloud Apps are now available for public preview. This allows IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • university building with classical architecture is partially overlaid by a glowing digital brain graphic

    NSF Invests $100 Million in National AI Research Institutes

    The National Science Foundation has announced a $100 million investment in National Artificial Intelligence Research Institutes, part of a broader White House strategy to maintain American leadership as competition with China intensifies.

  • Hand holding a stylus over a tablet with futuristic risk management icons

    Why Universities Are Ransomware's Easy Target: Lessons from the 23% Surge

    Academic environments face heightened risk because their collaboration-driven environments are inherently open, making them more susceptible to attack, while the high-value research data they hold makes them an especially attractive target. The question is not if this data will be targeted, but whether universities can defend it swiftly enough against increasingly AI-powered threats.

  • school building connected by lines to symbols of AI, data charts, and a funding document with a dollar sign

    ED Issues Guidance on the Use of Federal Grant Funds to Support Learner Outcomes with AI

    In response to President Trump's April 23 Executive Order on advancing AI education, the United States Department of Education has issued new guidance on how K-12 and higher education institutions may use federal grant funds "to support improved outcomes for learners through the responsible integration of artificial intelligence."