Feeds

Almost half of malicious sites tied to 10 networks

China mostly to blame, but so is Google

Using blade systems to cut costs and sharpen efficiencies

Almost half the websites pushing malware are hosted by just 10 networks, according to a new report that adds new support to the growing argument that a relatively few number of actors are responsible for most of the net-based threats.

The report (PDF) from StopBadware.org also showed a dramatic rise in China's role in the malware epidemic. Six of the 10 networks were internet service providers or backbone providers based in China and hosted more than 41 percent of the malicious websites.

Not that US companies weren't also contributing to the problem. Three American companies also made the list, including Google, whose blogs hosted 4,261 sites, or about 2 percent of the booby-trapped destinations.

The findings come a few weeks after anti-spam outfit Knujon released a separate report that found that almost 75 percent of spam sites were signed up by just 10 registrars. Once again, the three biggest offenders were located in China and included Xinnet Bei Gong Da Software, BEIJINGNN and Todaynic.

In many cases, owners of sites found pushing counterfeit watches, Viagra and other merchandise touted in spam failed to include correct contact information when registering the sites, as required. In an attempt to crack down on abusers, Knujon has begun reporting offenders to ICANN, which requires all website owners to be listed in a whois director. The sheer volume of the complaints has in some cases put a strain on ICANN's servers.

"It's like when you live in a small town and it's a nice place and the mafia moves in," said Knujon co-founder Bob Bruen. "Suddenly, things are not quite what they used to be because the bad guys are there."

Principals at StopBadware say lots of reasons are likely responsible for China's ascension in the rogue's gallery. For one, net access in that country is growing rapidly. And for another, Google bots that scour websites throughout the world are increasingly focusing on Chinese servers, compared with a year ago. Because StopBadware gets its data from Google's Safe Browsing initiative, it's only natural that the heightened attention will find more bad actors in that part of the world.

When StopBadware issued a similar report last year, it was able to help webhosts such as iPowerWeb clean up a large number of customer websites identified as spreading malware. It's unclear what the effect will be this time around, said Maxim Weinstein, manager of StopBadware, which is a project of the Berkman Center for Internet and Society at Harvard University.

"We hope that by getting this information out there publicly it starts a conversation and gets the ISPs and ... other companies that have an ability to play a role to come to the table and start talking," he said. ®

The smart choice: opportunity from uncertainty

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NEW, SINISTER web tracking tech fingerprints your computer by making it draw
Have you been on YouPorn lately, perhaps? White House website?
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Black Hat anti-Tor talk smashed by lawyers' wrecking ball
Unmasking hidden users is too hot for Carnegie-Mellon
Attackers raid SWISS BANKS with DNS and malware bombs
'Retefe' trojan uses clever spin on old attacks to grant total control of bank accounts
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.