Report: caching servers store malicious codeBest Security Tips offers daily news, information, advices and tips about spyware, adware, viruses, trojans, web vulnerabilities, hackers, other threats    | Register now | Login
   
TIPS NEWS TOOLS DOWNLOADS MALWARE FORUM BOOKS FREE MAGAZINES FREE WEBCASTS & VIDEOS
Internet security & monitoring for networks - Dld trial!  Bookmark and Share 
Best Tips
Security Scanner
Security Categories
Advertise With Us!
Latest Viruses / Threats
Our Partners
Downloads
Web Security : Report: caching servers store malicious code
Posted by Max on 2006/10/11 9:37:06 (1268 reads)
Web Security

Caching servers used by leading search engines have become malicious code repositories, according to a report published yesterday.

The study found when the website containing the code is removed, the malicious content it holds remains stored on the caching servers - used by ISPs and leading search engines - leaving businesses vulnerable to spyware, trojans and other security threats.

The report, published by Finjan, also revealed that cyber criminals are increasingly using Web 2.0 platforms to upload their malicious code to popular websites, allowing them to infect online users.

Yuval Ben-Itzhak, Chief Technology Officer at Finjan, said the current URL filtering systems used by businesses fails to block the "trusted" websites hosting the malicious codes. He believes proactive technology - which analyses content rather than its origin web address - is needed.

"This is more than just a theoretical danger. It is possible that storage and caching servers could unintentionally become the largest ?legitimate' storage venue for malicious code," he said.



"Such infection-by-proxy introduces new risks for businesses where trusted web addresses become a potential distributor of malicious code - making URL Filtering solutions blind.

"The largest threat to corporate users comes from web surfing and current processes to remove such malicious content from the web are simply not going far enough to combat this very serious and growing threat," he added.




Other articles
2010/3/18 8:07:31 - Panda Cloud Antivirus Receives ICSA Labs' First Cloud-Based Certification
2010/3/17 15:49:34 - Open-Source Email Security Taken To The Next Level at WebhostingDay
2010/3/17 15:18:40 - McAfee Warns ABout Scareware or Fake Antivirus Software
2010/3/2 5:22:13 - VeriSign and AVG Will Integrate VeriSign Trust(TM) Seal Within AVG LinkScanner(R)
2010/3/1 7:36:12 - New Stealth Software Protects P2P Users From Lawsuits by Copyright Holders
2010/2/24 13:55:16 - New State of The Art Firewall By Palo Alto Networks
2010/2/24 13:50:26 - Beware of Fake Antimalware Programs Like PCsProtector
2010/2/24 13:38:02 - New Registry Cleaner Guide Helps Your PC Perform Faster
2010/2/3 7:32:43 - PC Login Now (Full version) Available Now For Free.
2010/2/3 7:11:57 - Mitto Named One of 20 Top Web Applications

The comments are owned by the poster. We aren't responsible for their content.