Global web threats go local

The increasing sophistication of malware writers has been highlighted once again in a new report by web security firm McAfee.

The annual Global Threat Report found that internet criminals are now concentrating on configuring their attacks to specific geographic locations and languages to achieve greater success rates.

Spam and phishing emails for example are increasingly being written so that they appear in the native language of the recipient, while malicious web sites serve up malware in a language determined by the country the target is located in.

Criminals are also looking to exploit popular local applications such as banking web sites, crafting software which can determine specifically which user details need to be intercepted to ensure a successful attack, according to Toralv Dirro, McAfee Avert Labs Security strategist.

The report also drew attention to the exploitation of the user-generated content on many so-called web 2.0 sites such as Wikipedia and MySpace, to embed malicious code in these web pages.

"For the operators of these sites it would be a good idea to automatically convert pictures from one format to another to remove some of the exploits," he explained. "And for enterprises, if you allow your users to visit these sites you should make sure you filter not just email but http traffic."

See also:

Concerns rise over mobile threats

New McAfee research shows consumers are worried about the security of mobile services  11 Feb 2008

Thieves to target new technologies

New surveys find that tech-savvy criminals are seeking new targets  29 Nov 2007

McAfee predicts 2008's worst security threats

Social sites likely to be big targets for cyber criminals  16 Nov 2007

McAfee announces new security risk management solution

McAfee's new security platform offers management and compliance within a single platform  17 Sep 2007

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!