Google on Fake AV

Google on Fake AV

สรุปย่อ: พบว่ามีสถิติย้อนหลัง 13 เดือน มีการพบการโจมตีในรูปแบบของการพยายามให้ดาวน์โหลดโดยการใช้ Social engineering และยังพบว่ามีการเพิ่มขึ้นของ Fake AV จาก 240 ล้านเว็ปเพจ พบว่ามี 11,000 โดเมน ที่เป็นลักษณะการแพร่กระจาย Fake AV โดยลักษณะสำคัญที่พบ พบว่า 50% ของมัลแวร์ที่พบมาจาก ads(โฆษณาต่างๆบนเว็ปไซต์)

ดังรายละเอียด

“For years, we have detected malicious content on the web and helped protect users from it,” says Niels Provos, an engineer from the company’s Security Team, in a blog post.

They have witnessed the rise of drive-by downloads and social engineering attacks, and they have followed and analyzed the growing threat that is the Fake AV.

In the last 13 months, they have analyzed over 240 million web pages, and they have discovered some 11,000 domains distributing Fake AV, which makes 15% of all the domains that were spreading malware during that period.

Their analysis also revealed that there are some traits that set Fake AV apart from other malware – for example, Fake AV attacks occur frequently via sites like spam web sites and on-line Ads. At this moment, Fake AV software represents 50% of all malware that is delivered through ads.

They also discovered that the lifespan of these Fake AV serving domains has visibly declined through time:

This is just a preview of the findings contained in the research paper that Google is going to present at the Workshop on Large-Scale Exploits and Emergent Threats in San Jose two weeks from now, so we can expect to get a glimpse at the big picture very soon.

ที่มา : http://www.net-security.org/malware_news.php?id=1301&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+HelpNetSecurity+%28Help+Net+Security%29

Add a Comment

Your email address will not be published. Required fields are marked *