You are here: silicon.com > Software > Security Strategy

Security Strategy

Malware-infected site detected every five seconds

SQL injection attacks on the rise

Tags: sophos, malware

By Nick Heath

Published: 23 July 2008 15:52 GMT

A website infected with malware is detected every five seconds - a dramatic increase over the last 12 months due to the rise in SQL injection attacks.

Websites poisoned with malware capable of infecting visitors' machines are being discovered at a rate of 16,173 per day - three times faster than in 2007.

Security from A to Z

Click on the links below to find out more...

A is for Antivirus
B is for Botnets
C is for CMA
D is for DDoS
E is for Extradition
F is for Federated identity
G is for Google
H is for Hackers
I is for IM
J is for Jaschan (Sven)
K is for Kids
L is for Love Bug
M is for Microsoft
N is for Neologisms
O is for Orange
P is for Passwords
Q is for Questions
R is for Rootkits
S is for Spyware
T is for Two-factor authentication
U is for USB sticks/devices
V is for Virus variants
W is for Wi-fi
X is for OS X
Y is for You
Z is for Zero-day

Antivirus firm Sophos found that more than 90 per cent of the web pages capable of spreading Trojan horses and spyware are legitimate websites. Recent infected websites include those of ITV, Sony PlayStation and a golf page on the BBC site - all these websites have now fixed their security hole.

Hackers place malware into the database running a website using SQL injection attacks, which can allow Trojans and keyloggers to be automatically installed on visitors machines.

According to the Sophos security threat report Blogspot.com, the blog publishing system owned by Google, was found to be hosting two per cent of the world's web-based malware in June 2008 - with hackers hosting malicious code on blog pages and posting links to malware infected websites in comments.

Senior technology consultant at Sophos, Graham Cluley, said: "Many businesses are increasingly putting themselves at risk by not scanning web activity and employees are going to these websites and getting infected."

He said the biggest threat comes from home workers because the wider range of websites visited in the home increased the risk of getting infected.

The security threat from email attachments has fallen dramatically during the same period, dropping from one infected attachment in every 332 emails in the first six months of 2007 to one in every 2,500 during the first six months of 2008.

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Jon Collins Is losing a mobile device really such a big deal? How to minimise the damage to your business

Tim Ferguson Exclusive: Former MySQL boss Marten Mickos talks open source Why Microsoft could become one of the "biggest friends of open source" and why Oracle getting its hands on MySQL could be "one of the biggest open source coups ever"...


  • Jobs
SEO Specialist - London

Due to the nature of the business, as SEO Specialist, you will be involved in online conversion optimisation including working with marketing and ...

Web Developer - Kent

The role requires taking day to day updates of clients websites, building web pages, extending sites, content input, building emails etc. You are ...

Senior Web Designer

To be considered for this position, you must have: excellent abilityin XHTML-CSS fluency in Dreamweaver, Fireworks/PhotoShop, Illustrator, Flash ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: