Sophos has just published its latest Sophos Security Threat Report, covering the first six months of cybercrime in 2008. This points out that the web is now "the preferred vector of attack for financially-motivated cybercriminals. On average, Sophos detects 16,173 malicious webpages every day -- or one every five seconds. This is three times faster than the rate seen during 2007."
The problem is compounded by the use of SQL injection and IFrame attacks (see below). Sophos says:
Over 90% of the webpages that are spreading Trojan horses and spyware are legitimate websites (some belonging to household brands and Fortune 500 companies) that have been hacked through SQL injection.
On his new blog, Sophos's oft-quoted Graham Cluley says: "A lot of the media coverage for the report has focused on a tiny part of it: our statistic showing that 2% of the malware is hosted on Blogspot.com."
Using Blogger is a no-brainer because it's free and it guarantees you'll get crawled by Google.
Only yesterday I was complaining about Blogger being used for spam, and predicting that Knol would also get more than its share of scammers.
Come on, Google, surely it's evil not to clean up the mess in your own front yard!
