Feeds

One in 10 web pages laced with malware - Google

Do not underestimate the power of the dark side

Internet Security Threat Report 2014

At least one in 10 web pages are booby-trapped with malware, according to Google.

A five-strong Google research team found that 450,000 pages, out of a sample of 4.5 million pages, contained scripts to install malicious code, such as Trojans and spyware on vulnerable PCs, the BBC reports. This is a conservative estimate - another 700,000 pages given the once-over were thought to be suspicious by Google.

Google's Ghost in the Browser study (PDF) covers the well-understood problem of drive-by-downloads from compromised sites, which are eclipsing virus-infected email as a means to spread malware. The study takes the debate further chiefly by presenting evidence about the sheer volume of web content on the "dark side" of the net. As well as hacker-run websites, malware can be injected into otherwise legitimate site via a variety of ruses, the Google team explains.

The tricks include hacking into a web server to plant malware, or planting it within third-party widgets or advertising. User-generated content also creates a means to upload malware. The researchers hope to use their findings to "map" the problem and aid the development of a new generation of safe surfing tools that steer users away from harm. ®

Intelligent flash storage arrays

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Shellshock over SMTP attacks mean you can now ignore your email
'But boss, the Internet Storm Centre says it's dangerous for me to reply to you'
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.