In a sense, this crimeware as a service (CAAS) was inevitable. According to an earlier report from Finjan, more than 51 percent of websites that pushed malicious content in the second half of 2007 were legitimate destinations that had been commandeered by bad guys. The service is evidence that there's money to be made in automating that process - and one more sign that cyber-crime has grown into a full-fledged business where no opportunity to turn a profit is passed up.
"You can imagine the magnitude of this marketplace now," he said in an interview. "They really commercialize everything in this eco-system."It's not the number of the compromised websites that is a worry, but their prominence. The information was likely gleaned by keyloggers intercepting File Transfer Protocol information being sent from infected computers to webhosting servers. Once you have that, you can change anything you like on even the most securely encrypted page because you have access to the source code at the publishing level. It's a wake-up call for webmasters to use only secure FTP to update servers.
|Microsoft Employees 'Suggested...||16|
|Windows 8.1 Update Crippling PCs With...||9|
|AMD GPU Shipments Surge 11 Percent In...||7|
|AMD Radeon R7 Series 240GB SSD Review||7|
|Official Destiny Gameplay Trailer: Venus...||7|
|Net Neutered: Netflix Sucks Up To Time...||6|
|Microsoft Windows Store Is Polluted With...||6|