Google identifies top 10 malware domains, Beladen ranked 124th
Monday, June 8, 2009
A recent report from web security researchers identifying the domain Beladen.net as having infected 40,000 websites appears to have been overblown. According to the Google security blog, Google has identified only 3,500 sites infected by Beladen.
Google said its scans of the web have uncovered more than 4,000 sites that appear to have been set up for distributing malware - 1,400 of which are located in China.
The top 10 domains included Gumblar.cn, which infected 60,000 websites before the domain was moved to a UK site called Martuz, which has infected another 35,000.
All of the domains on Google's top 10 list have compromised more than 10,000 websites. The domain googleanalytics.net, which like several other malware sites spoofs a legitimate Google site, had infected around 20,000 sites.
Researchers said Beladen also uses a domain name similar to the legitimate Google Analytics domain to record the users' browsing statistics for the attacker. Beladen's 3,500 infected sites ranked it only 124 on the list, Google said.
Security researchers last week likened these mass infection sites to botnets of infected websites.

Related News:
UK cops arrest two in Zbot Trojan case - 11.19.2009 The British Metropolitan Police took two suspected cyber criminals into custody earlier this month in connection with an investigation into the Zbot banking Trojan.
Facebook shakes up privacy policy in response to criticism - 11.19.2009 After a week-long comment period in which 7,000 Facebook users voiced their opinions, the giant social media network announced that it would overhaul and simplify its privacy policy.
Domain registrar VeriSign will receive "major security update" by 2011 - 11.19.2009 A well-known security vulnerability in the way .com and .net websites process DNS values - the way alphanumeric website names are translated into numeric web addresses - will be fixed, but not until 2011, according to a report from tech news website ZDNet.
Malware attack targeting fans of Twilight series - 11.18.2009 As with many recent hot news trends, the upcoming release of the second movie based on Stephenie Meyer's Twilight books has attracted the attention not just of the vampire wannabes, but of actual cyber criminals as well.
Giant black-hat SEO campaign funnels victims to scareware sites - 11.18.2009 Security researchers say that cyber criminals have conducted a large-scale campaign to influence Google results, pushing malware-spreading sites higher on the list and dropping legitimate results to the bottom.
|