September 7, 2007 1:17 PM PDT
Security Bites Podcast: The rise of crimeware
Listen Now
At least 10 different toolkits are now available for sale on the Internet.
Listen to more episodes of this podcast at the Security Bites podcast archive.
Subscribe to this podcast
Subscribe to the podcast rss feed,
In the summer of 2007, we saw thousands of Web sites defaced in a short time with referrer code to a server loaded with exploits. The exploits were part of a toolkit available for sale on the Internet allowing anyone--no skill required--to load the software onto a server somewhere, then direct traffic to that server. In this case, criminals took popular Web sites and inserted so-called iFrames. The viewer would see the desired page come up in his or her browser, but, behind the scenes, the browser would be contacting a server loaded with exploits.
In late summer, the Bank of India, a venerable financial site, was attacked using much the same trickery.
Yuval Ben-Itzhak, CTO of Finjan, a security company that's been at the leading edge of detecting Web 2.0 malicious software, told CNET.com's Robert Vamosi that Finjan is seeing at least 10 different toolkits on the Internet today. The company has released several white papers and reports on the crimeware, including screenshots of the tools used and the sites defaced. Vamosi speaks with Ben-Itzhak on this week's edition of Security Bites.
Continue the discussion
