Forest Global Training Partners

Cyber Risks · Krebs on Security

Web Badness Knows No Bounds

Summary: Google's Safe Browsing program, which flags more than 10,000 suspicious and malicious sites daily, released data showing that hacked legitimate websites far outnumber sites attackers built to distribute malware. The data also ranked networks by malicious concentration: Google scanned 13 percent of New York data center Pilosoft's network and found more than half of the sites scanned were malicious, while 22 percent of sites on one Comcast network segment (AS20214) were malicious based on a 4 percent scan.

Bottom line: The sites most likely to infect your users are the legitimate ones they already trust, so a blocklist built around known-bad destinations leaves the larger share of the problem unaddressed. Pilosoft's history in the DNS Changer botnet takedown shows that a hosting provider with a record of malicious concentration can keep operating and keep appearing on these lists.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related