The increasing sophistication of malware writers has been highlighted once
again in a new report by web security firm
McAfee.
The annual Global Threat Report found that internet criminals are now
concentrating on configuring their attacks to specific geographic locations and
languages to achieve greater success rates.
Spam and phishing emails for example are increasingly being written so that
they appear in the native language of the recipient, while malicious web sites
serve up malware in a language determined by the country the target is located
in.
Criminals are also looking to exploit popular local applications such as
banking web sites, crafting software which can determine specifically which user
details need to be intercepted to ensure a successful attack, according to
Toralv Dirro, McAfee Avert Labs Security strategist.
The report also drew attention to the exploitation of the user-generated
content on many so-called web 2.0 sites such as Wikipedia and MySpace, to embed
malicious code in these web pages.
"For the operators of these sites it would be a good idea to automatically
convert pictures from one format to another to remove some of the exploits," he
explained. "And for enterprises, if you allow your users to visit these sites
you should make sure you filter not just email but http traffic."
Comments
Have your say on this article