Sophos: Web-Based Attacks Rise Sharply in June

BOSTON -- Sophos, a world leader in IT security and control, has revealed the most prevalent malware threats causing problems for computer users around the globe during June 2007.

The figures, compiled by Sophos's global network of monitoring stations, show a continued, sharp rise in web-based threats. Sophos uncovered an average of 29,700 new infected web pages every day—around 80 percent of which were located on hacked legitimate sites.

Top 10 Malware Threats: June 2007

Iframe, which works by injecting malicious code onto web pages, has again topped the chart, accounting for nearly two thirds of the world's infected web pages. Earlier this month, an Iframe attack on multiple Italian websites occurred, making headlines around the world. More than 10,000 web pages were infected, most of which were on legitimate but compromised websites hosted in Italy. Victim websites included Italian city councils, employment services and tourism sites. Most of the affected pages appear to be hosted by one of the largest ISPs in Italy.

“The number of new infected web pages identified each day in June more than tripled compared to May—a clear indicator that malware being hosted on exploited websites due to vulnerabilities is steadily climbing,” said Ron O’Brien, senior security analyst at Boston-based Sophos. “Organizations and owners of websites need to reassess their security to ensure that visitors are not being infected.”

Sophos plc