Tag Archives: badware

Upcoming StopBadware events: HostingCon, Online Trust Forum 2011

Happy middle-of-July, everyone: we hope the season is treating you kindly. The next few months are going to be pretty eventful for us—literally. We have several events coming up in various cities (all stateside for now), and we’d love to … Continue reading

Tagged , , , , , | Comments Off

A new form of script injection

The good people at Armorize recently discovered and analyzed a new form of script injection, which they have dubbed "Mass Meshing Injection." The unique characteristic of this new attack is that each compromised site loads a malicious script from a … Continue reading

Tagged , , | Comments Off

Announcing the newest StopBadware report: The State of Badware

Today, StopBadware is proud to announce the public release of our first State of Badware report. The State of Badware offers insight into recent badware trends and responses and examines the factors that contribute to badware’s persistence.  Badware is a … Continue reading

Tagged , , , , , | 2 Comments

Recommended reading

In the past couple months, we’ve come across some particularly informative and well-written reports and articles about badware. Here, for your reading pleasure, are a few of our favorites: Botnets: Measurement, Detection, Disinfection and Defence by Daniel Plohmann, et. al. … Continue reading

Tagged , , , , , | Comments Off

A different story about Android malware

The security world is abuzz about the recent malware apps discovered in—and removed from—the Android Market earlier this week. Ars Technica published an article with a headline that captures the general tone of the industry: “Malware in Android Market highlights … Continue reading

Tagged , , , | Comments Off

The rise of digital collateral damage

Stuxnet has been in the news a lot lately, as it appears to have been an effective case of cyberespionage against a high-profile and high-stakes target: Iran’s nuclear processing facilities. Much of the focus in articles such as this New … Continue reading

Tagged , , | 1 Comment

Great report on DDoS attacks

A group at the Berkman Center—led by StopBadware's co-founder and Board member emeritus, John Palfrey—just released a great report about the impact of distributed denial of service (DDoS) attacks on the websites of independent media and human rights organizations. From … Continue reading

Tagged , , | 2 Comments

The challenges of counting badware sites

Like many folks who are trying to fight badware, we often find ourselves trying to quantify the problem. How many badware websites are there? How many are hosted by a particular IP address, or a specific AS, or a given … Continue reading

Tagged , , | 1 Comment

AV vendors say most badware sites are compromised

A recent report from Symantec reinforces the idea that most web-based malware is distributed via compromised, legitimate sites: In 2010 so far, using the same approach, the proportion of malicious domains that are legitimate [i.e., set up for reasons other … Continue reading

Tagged , | Comments Off

Australian ISPs on the right track

In early June, the Australian Internet Industry Association, an ISP industry trade group, published icode [PDF], a voluntary code of conduct for ISPs to follow to better fight bots on their networks. Like the previously-mentioned IETF draft, this document lays … Continue reading

Tagged , , , | Comments Off