In its Global Threat Report, ScanSafe a leading provider of SaaS (Software-as-a-Service) Web Security reports that the total number of Web-based malware blocks has increased by 87 per cent in July 2008 compared to the previous month. Specifically, the first two weeks in July have shown an extraordinarily high volume of malware blocks.
The increase in Web-based malware was driven by the ongoing compromise of websites which represented 83 per cent of all malware blocks for the month. The increase was, largely the result of the continued SQL injection attacks which were responsible for 75 per cent of all malware blocks in July 2008. As a result, July has had an overwhelming number of malware blocks 34 per cent more blocks than the whole of 2007.
In June 2008 we reported a 278 per cent increase for the first six months of the year. That alarming trend has continued with the number of Web-based malware blocks exploding in the first two weeks of July, said Mary Landesman, senior security researcher at ScanSafe.
July 2008 also bore witness to an increase in social engineering email scams designed to install malware including backdoor Trojans and rogue scanners - on victims computers. Worryingly, 95 per cent of ScanSafe customers fell for the scams and attempted to clickthrough to the malicious sites, which represented 1.3 per cent of all malware blocks for the month. Fortunately all ScanSafe customers were and are protected from such malicious content.
Although this may not seem like a high percentage, it is extremely significant given that these scams are now able to get past spam filters which typically provide a high level of protection from this type of socially engineered malware, Landesman comments. It is disconcerting that cyber criminals are becoming increasingly sophisticated in creating these scams, so much so that more and more people are falling for them.
The ScanSafe Global Threat Report is based on an analysis of more than 10 billion Web requests the company scans each month on behalf of business customers in over 60 countries across five continents. It represents the worlds largest security analysis of real-world corporate Web traffic.
ScanSafe is the largest global provider of SaaS Web Security, ensuring a safe and productive Internet environment for businesses. ScanSafe solutions keep viruses and spyware off corporate networks and allow businesses to control and secure the use of the Web and instant messaging. As a fully managed service, ScanSafe's solutions require no hardware, upfront capital costs or maintenance and provide unparalleled real-time threat protection. Powered by its proactive, multilayered Outbreak Intelligence TM threat detection technology, ScanSafe scans more than 10 billion Web requests and blocks 100 million threats each month for customers in over 60 countries.