Monthly Archives: July 2010

Hijacked subdomains still serving malware

Last month the Unmask Parasites blog wrote about attacks using hijacked sudomains of legitimate websites to serve badware.  At the time of that articles publication the attacks had been going on for a month already.  We are still seeing a … Continue reading

Tagged , , , | Comments Off

NSFOCUS, our newest data provider

We are pleased to welcome Chinese security firm NSFOCUS as a new data provider! NSFOCUS joins Google and Sunbelt Software in feeding our Badware Website Clearinghouse with updated information about URLs they have discovered to be bad. Like all of … Continue reading

Tagged , , | Comments Off

StopBadware welcomes new developer

StopBadware is pleased to welcome Matthew Shanley, our new lead developer! As we mentioned previously, our current lead developer, Brandon, will be heading off soon to tortue himself for three years as a law student. Matt joins us from Constant … Continue reading

Tagged | 2 Comments

Establishing expectations for AV vendors

At StopBadware, we're currently revising our guidelines for badware applications. The goal of these guidelines is to distinguish between applications that are badware (defined as "software that fundamentally disregards a user's choice about how his or her computer or network … Continue reading

Tagged , , | 4 Comments

What We Learned at ThePlanet (AS21844)

After months of looking into the infections of AS21844 (ThePlanet) we've decided to wrap up our investigations for now.  We have learned quite a bit from our communications with customers at ThePlanet.  While no one from ThePlanet has spoken with … Continue reading

Tagged , , , | Comments Off

AV vendors say most badware sites are compromised

A recent report from Symantec reinforces the idea that most web-based malware is distributed via compromised, legitimate sites: In 2010 so far, using the same approach, the proportion of malicious domains that are legitimate [i.e., set up for reasons other … Continue reading

Tagged , | Comments Off