[funsec] Compromised legit sites power hack attacks
juha-matti.laurio at netti.fi
Tue Apr 8 07:25:55 CDT 2008
This is something we already know.
"Drive by downloads and targeted attacks, rather than internet worms, have become the favourite attack mechanism, according to the latest edition of Symantec's Internet Threat Report, which gives a comprehensive run-down on prices in the underground economy.
In the past, users had to visit intentionally malicious sites or click on malicious email attachments to become victim of a security threat.
These days, hackers are compromising legitimate websites and using them as a distribution medium to attack home and enterprise computers.
Social networking sites such as MySpace and Facebook are a popular target for such attacks, Symantec reports."
We know that an advice Surf to trusted Web sites only is part of history.
More information about the funsec