We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
79,489 News Articles

New high in legit websites hosting malware

Most attacks come from established sites

The number of legitimate websites being hacked to host malware has hit startling highs in recent days, new figures from MessageLabs have revealed.

Data taken from the days between the 4th to 8th of May showed that 84.6 percent of websites blocked by the company for hosting malicious content were 'well-established' domains that have been around for a year or more.

During the same period, 10.2 percent of blocked domains were less than a year old and only 3.1 percent were less than a week old.

At first glance this, this runs counter to the assumption that malicious websites more commonly exist for only days or hours in some cases, the better to avoid detection and filtering. This is termed 'fast-fluxing', cycling websites through a maze of bogus sub-domains.

However, according to MessageLabs, the likely explanation is that a move to genuine domains means that the fast-fluxing has now migrated to use a different part of the domain tree.

"The bad guys will compromise the DNS and add sub-domains," said MessageLabs' Paul Wood. The recent figure represented a high mark, admitted Wood, but still demonstrated a gathering storm.

"People need to be extra vigilant and understand that even sites they know and trust can be compromised through attacks such as SQL injection attacks, while businesses need to ensure they take the necessary precautions to block all the latest malicious sites," said Wood.

"With the ever advancing world of cyber crime, nothing can be taken at face value."

One consequence was that the days of reputation filtering services could be numbered as a primary defence. If the domains were fraudulent sub-domains exploiting legitimate domains, this would be difficult to defend against on such a scale.

In Wood's view the only hope was to embrace hosted services, the business MessageLabs is in. "There are things you can do in the cloud that you simply can't so on your own computer."


IDG UK Sites

Sony PlayStation 5 release date, price and specs UK: When is the PS5 coming out?

IDG UK Sites

New Apple TV release date rumours, features: 'new Apple TV next week' rumour

IDG UK Sites

Mobile email is powerful and useful - but also hopelessly intrusive

IDG UK Sites

How the Oculus Rift VR headset is helping train the surgeons of tomorrow