also @ TechSpot: Yahoo redesigns Flickr, adds 1 terabyte of free storage and more

Increased RSS malware attacks predicted

By Derek Sooman

On January 12, 2006, 2:11 PM

RSS (really simple syndication) may increasingly attract malicious code attacks, according to ScanSafe's latest web security report. Due to the fast growing popularity of the technology, malicious code writers are expected to take advantage by hijacking existing feed clients, causing automatic downloads of new worms and other malware.

According to figures taken from the study, there was a 265-percent increase in the volume of spyware and adware during the second half of 2005, compared with the same period in 2004. The report also notes there was a 165-percent increase in new web viruses in 2005 compared to 2004.

In addition the research indicates that web browser vulnerabilities are proliferating as attackers focus on the web as an area of network vulnerability. Protection of the web by companies was found to be weaker relative to email, network and desktop security. Areas of concern highlighted by ScanSafe are: the emergence of vulnerabilities in Microsoft Internet Explorer, the administrative struggle to update patches in browser software and advent of "zero day" exploits.

No tags on this story

User Comments: 11

Got something to say? Post a comment
  1. [quote]"With spyware figures roughly doubling every month, which is what we've seen over the last four months, we can expect to see things get worse before they get better," according to Eldar Tuvey, ScanSafe CEO. "It was a similar pattern for spam, where companies were being bombarded with spam emails before the problem was tackled successfully. But while companies have tackled threats like spam through managed services, they need to adopt similar internet-level scanning techniques for the web."[/quote]Well, i don't envy those people trying to fix this.
  2. My neighbor and I had a discussion on this subject (RSS feeds and security) a few weeks ago, so this announcement comes as absolutely no surprise, with continously evolving, and spreading threats.These new potential RSS exploits, as well as spyware/malware now infiltrating computers at the kernel level (rootkits) as well as the application level, demand nothing less than diligence, education and awareness on the user level.........and therein lies a big part of the problem...the average user, who is basically un-informed when it comes to maintenance and security.
  3. Ya it's like buying a car, but you don't realize that if you take two left turns followed by a right, your back tires will pop.They don't tell you that if you turn on the radio and then the air, followed by a honk of the horn, your windshield will crack.Such is the Internet these days.It does make me laugh, people cannot come up with ONE new web technology (like rss), without it being exploited in some way not to long after.Makes me very cautious to jump on ANY new web trend, until it is tried and true.And why is it that nearly every exploit ultimately leads to "taking control of your PC". I see that description on everything. Seems careless of MS if you ask me.
  4. Not surprised really. More attakcs of all kinds will occur. Its just naturally like that. Hopefully we'll have some sort of defensive army of geeks able to combat this new threat!
  5. I think this is inevitable. The virus/malware maker is always exloiding new grounds. Seems like RSS is gainig user so they are for sure will take that hole. I guess the next version of Antivirus software needs to address this problem then.
  6. Yet another great research article without any base represented for its percentages. What do you suppose those numbers could mean? The only numbers they give are based on IM blocking per user for some unknown corporations. Really now, you don't suppose I can make a trivial article about the [url=http://www.style.org/unladenswallow/]airspeed velocity of an unladen swallow[/url] and fill it full of baseless percentages, and still get published?"42% of all statistics are made up." -Steven Wright
  7. I never take statistical figures like these seriously; it's more of a boolean to me - good or bad. In this case, it's "bad." A 265% increase doesn't mean any more than 165% since there is no indication of the population tested, etc. But the thing to be reminded here is not really stats to bolster the facts; rather, it is another report stating the seriousness of RSS malware attacks. I have no doubt spywares and hijacking programs will be reduced as have spam e-mails. The prediction, albeit obvious, is the damage that will be caused until the problem is solved. And as always, hijackers and malicious code writers are always a step ahead of everyone else. They move to different platforms and different architectures and exploit their weaknesses. On the bright side, security companies won't run out of jobs.
  8. I think the viruses and malware are written by the Microsoft programmers. To get even on the public for chewing them out all the time about insecurity. Hmm, yes, it is a vicious cycle.And PanicX, before writing that article, you must decide if it is an African or European Swallow.Observe: [url]http://www.style.org/unladenswallow/[/url]
  9. I'm just awaiting an internet security program that eliminates all Malicious trojans, viruses, and spyware programs. I'm not at all sure if that is possible, but I think we are getting closer to it being a reality. In my opinion, I think those percentages will rise to an all time high this year. I predict there will be at least a 20% increase of spyware and adware in 2006.
  10. [b]Originally posted by PanicX:[/b][quote]Yet another great research article without any base represented for its percentages. What do you suppose those numbers could mean? The only numbers they give are based on IM blocking per user for some unknown corporations. [/quote]But fearmongering is fun, isn't it?
  11. [b]Originally posted by MonkeyMan:[/b][quote]I'm just awaiting an internet security program that eliminates all Malicious trojans, viruses, and spyware programs. I'm not at all sure if that is possible, but I think we are getting closer to it being a reality. In my opinion, I think those percentages will rise to an all time high this year. I predict there will be at least a 20% increase of spyware and adware in 2006.[/quote]Ah yes there IS such a program!!It's called "reach around your pc and unplug the connection to the internet permenantly and then reload your PC.exe"Your computer will never be infected again!

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.