Feeds

Twitter, Facebook urged to improve security

'Vulnerable' defined in less than 140 characters

Secure remote control for conventional and virtual desktops

Social networking sites such as Twitter and Facebook have become feeding grounds for cybercrime.

A threat report by net security firm Sophos warns that Web 2.0 companies are too focused at growing their user bases, at the possible expense of paying attention towards defending their existing customers from internet risks.

Sophos reckons a quarter of organisations have been exposed to spam, phishing or malware attacks via sites such as Twitter, Facebook, LinkedIn and MySpace.

"Web 2.0 companies need to examine their systems and determine how, now they have gathered a huge number of members, they are going to protect them from virus writers, identity thieves, spammers and scammers," said Graham Cluley, senior technology consultant at Sophos. "The honeymoon period of these sites is over, and personally identifiable information is at risk as a result of constant attacks that the websites are simply not mature enough to protect against."

Cluley told El Reg that Twitter and Facebook ought to scan for links to sites hosting malware or promoted via spam messages. Both sites also ought to force users to use stronger (harder to guess) passwords and do more to prevent cross-site scripting attacks, he added.

Figures from Sophos also point to the growth in scareware scams, where users are tricked into buying rogue security packages of little or no utility on the basis of false security scans. Sophos picked up an average of fifteen such scareware sites per day during the first half of 2009, a three-fold increase over the same period last year.

Sophos now catalogues 22.5 million different samples of malware, almost double the level it recorded in June 2008. Around 40,000 new suspicious files are examined by security analysts at Sophos every day.

The firm discovers an infected webpage once every 3.6 seconds, on average, four times faster than in the first half of 2008. Two years ago, 50 per cent of all web-based malware was hosted in China. This figure dropped to just 14.7 per cent in the first half of this year, with the USA eclipsing China as the biggest single locus of drive-by-download threats (39.6 per cent).

Compromised US computers also make the single greatest contribution to spam (15.7 per cent), which cumulatively makes up nine in 10 (89.7 per cent) of all business email. The latest edition of Sophos's Security Threat Report can be found here (registration required). A summary can be found here. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Meet OneRNG: a fully-open entropy generator for a paranoid age
Kiwis to seek random investors for crowd-funded randomiser
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.