|
Author: Alexandra Gamanenko Article source: http://www.selfseo.com/. Used with author's permission.
It seems that nowadays cybercriminals prefer cash to fun. That is why malicious programs of various kinds (viruses, worms, Trojan horses, etc.) are very often aimed at stealing valuable -- in a direct sense of this word -- private and financial information. When written, these programs are spread all over the Web.
What do means of their distribution have in common? Thinking a bit about it will help us ordinary Web users realize how to behave online and what to avoid.
Let's use logic and good old common sense. What do you think are the most suitable (for a criminal)means to spread malicious code? The answer is almost obvious. It is something which, first,ensures his anonymity and, second, offers victims (i.e. us) very little or no protection against malware. Last, but not least -- this means should be very cheap or, even better, free.
(I'll confine myself to mentioning only those means which endanger EVERY Internet user. Not everyone exchanges files or downloads music and freeware. But is there anybody who doesn't send and recieve email or visit websites?)
Well, if you were a cybercriminal who wanted to spread a malicious program quickly and as widely as possible, how would you distribute it?
What first comes to mind? First, sending contaminated emails through spam. It is possible (and not too difficult for, say, a programmer) to enclose virtually anything into the attachment. With more effort, a programmer can create a message without any attachments that will infect a PC anyway.
Though many email service providers offer basic anti-virus protection, they aren't obliged to do it. How effective this protection is -- that's another question.
Besides, spam is very cheap to distribute. Of course, spammers of all stripes don't use their own machines. Why should they? They prefer PCs which became remotely controlled after being infected with a special program. Cybercriminals build huge networks of such machines and hire them out to spammers. Using "bots" (they are also called "zombies" or "slave computers") gives a spammer so valued anonymity -- spam messages come to frustrated PC users from IP addresses registered somewhere on the other side of the globe.
What about other possibilities? Websites. Malicious websites are very dangerous.Cybercriminals create them exclusively to execute malicious code on the visitors' computers. Sometimes hackers infect legitimate sites with malicious code.
When unsuspecting users visit malicious sites, various nasty applications are downloaded and executed on their computers. Unfortunately, more and more often these applications contain
keyloggers--software programs for stealing information.
Keyloggers, as it is clear from the name of the program, log keystrokes --but that's not all. They capture everything the user is doing -- keystrokes, mouse clicks, files opened and closed, sites visited. A little more sophisticated programs of this kind also capture text from windows and make screenshots (record everything displayed on the screen) -- so the information is captured even if the user doesn't type anything, just opens the views the file.
Blogs can be contaminated with malware, too. In April experts from Websense Security Labs warned users that they discovered hundreds of these "toxic" (contaminated with malcode) blogs set by hackers. Blogs are suitable for them: there are large amounts of free storage space, no identity authentication is required to post, and there is no scan of posted files for viruses, worms, or spyware in most blog hosting services.
Three months passed, and here is the quote from a new Websense report released this Monday, July, 25th : "hackers are using free personal Web hosting sites provided by nationally- and internationally-known ISPs to store their malicious code…" This July Websense detected that these sites are used for this purpose much more often. The company's senior director of security and technology research said that "in the first two weeks alone we found more instances than in May and June combined." By all means it's a tendency, and a very disturbing one.
Such sites are free and easy-to-create. With the average lifespan of between two and four days, they are difficult to trace. Free hosting services rarely offer even basic security tools. Short-lived websites,no files scanning for viruses, nothing prevents "authors" form uploading executable files - isn't such a site an ideal tool for distributing malicious code?
Anonymity of the creator -- no end user protection -- no cost. What else can a cybercriminal wish? That is why there was the outbreak of "toxic blogs" in April - and that's why infested free websites are multiplying so quickly now.
But how to contaminate as many computers as possible? It is the aim of cybercriminals, isn't it? The more traffic, the more programs lands on end users' computers. Hackers attract traffic to malicious websites by sending a link through spam or spim (the analog of spam for instant messaging (IM).
They are ingenious in finding new ways to make people open an attachment or click on a link to visit a certain website, though people are constantly told not to follow links in spam.
Just some of their dodges -- disguising infected spam emails as CNN news alerts, subject lines with "breaking news" like "Osama bin Laden caught", "Michael Jackson tried to commit suicide". How about celebrities in the nude? Just click! And, one of the latest, an "amateur video" that ostensibly shows London bombing sights.
These (and similar) tricks are usually called social engineering. Online criminals have become good psychologists -- the big bucks which crimes like online bank fraud can bring turned them into earnest students.
However, there is one thing that spoils the mood of those who spread malicious programs.
To hackers' deep regret, people become more aware of the risks they face in the Internet. A study by Pew Internet and American Life Project released on July 6th shows that:
91% (!) of respondents (adult Internet users from the U.S.) changed their behavior online one or way another.
81 % have become more cautious about e-mail attachments
48 % have stopped visiting certain websites which are said to be harboring malicious programs People stop using file-sharing software (25%) and even start using Mozilla, Firefox or other browser instead of Internet Explorer (18%)
Well done! Actually, there is nothing left for us users but to become more conscious of the threats and more cautious in the Web. Every PC user has to care for his information himself, protecting his own computer against numerous data-stealing programs of all sorts.
But don't you think that protection against various malicious programs shouldn't be only end users' private business? It is up to service providers to offer at least basic protection for end users and break this "triad" (Anonymity of the creator -- little or no end user protection -- little or no cost) which enables all this crap to spread so easily. Alexandra Gamanenko currently works at Raytown Corporation, LLC -- an independent software developing company that provides various products and services for information security. Software aimed at making identity theft impossible, services like protected email and protected Web hosting are only small part of what this company offers.
Learn more -- visit the company's website
http://www.anti-keyloggers.com
What You Should Never Feed Your Dog
Unfortunately, there are a number of household items which we tend to take for granted that are potentially very dangerous to your dog's health. It is especiall...
You Too Can Have Charisma
Do you know anyone that everyone seems to be drawn to? You continue to watch as this person moves around the room attracting and chatting with and making friend...
10 Minutes to Your Google Sitemap
What you have access to with the new Google Sitemaps program is truly a gift from the Google gods. They've offering you a tool that you can use to keep your si...
19 Ways To Attract Higher Paying Clients
19 tips on how to attract higher paying clients for service professionals.
4 Dangers In Flipping Real Estate
If you have recently purchased some real estate for investment purposes, you are in good company. Recent reports suggest that as many as 25% of these purchases ...
7 Advantages to Incorporating
There's no question that hard work and a little luck is what it takes to BE successful. But a little knowledge, especially when it comes to setting up your bus...
Top Ten Tips To Get Started Writing Your Book - Part 2
You are far more likely to write and publish a book that sells well if you follow these tips before you write a single chapter. Use these ten tips to get star...
A History of Baby Names
Ever wonder where your name came from or how surnames were developed? Find out in this short history of names.
What Did You Want To Be When You Grew Up
There truly is something to be said about the career aspirations of kids. You see, the younger a person is the less likely his hopes and dreams are to be influ...
Dieting - The No Diet Diet
Dieting doesn't work. C'mon, if it did, we'd all be size 8 and running around in our bikinis this summer, wouldn't we?...
The Definition of Spam
Everything seems to get tagged spam that search engines don't like. Is that fair, and what is spam really? Spam or not find out what is bad for your site's rank...
Lemon Tetras
Glassily transparent, the lemon tetra (hyphessobrycon pulchripinnis) could appear to be just a sunbeam flashing through your community tank if not for backgroun...
Calvin Klein 2005 Spring & Summer Collection
Calvin Klein - a name we all recognize and a designer who is world renowned for his fabulous fashions. So how did Calvin Klein come to be.?
Childrens Allowance
Allowance is a great teaching tool when given in the spirit of generosity and practicality. It's never too early to learn or teach responsibility and when we co...
Good Things Come to Those Who Wait (and Other Analogies and Cliché’s for SEO)
We've all heard that familiar expression, "Good things come to those who wait". Whether you're waiting for your Heinz ketchup to pour out onto your burger (reme...
How To Choose The Best MLM Leads
What are the characteristics of the Best Mlm Leads? This is a good question to ask before you spend any money buying leads to build your MLM business. Before we...
Dont Suffer From Information Overload
Learning everything you need to know about internet marketing can be overwhelming. Here's 7 tips to help you avoid being overwhelmed.
The Most Valuable and Often Neglected Piece of Equipment in a Home Gym: Mirrors!
A mirror in your home workout room can help you with your form during exercise, allow you to visually track your progress and motivate you to achieve greater re...
The Challenge to Lead
The topic of leadership has been and continues to be one of the most vital topics in human history. From ancient civilizations to modern day multi-national corp...
Keywords, Choose Them Wisely
People searching for information on products don't always use the keywords you would expect them to use. And just because a competitor has a large enough budget...
Why Women Earn Less, and How to Avoid the Gender Trap
As a woman, unless you act now, by the time you retire, you will have been paid about $455,000 less than a man, for the same work. This article explains those ...
Improve Your Mental Cognitive Abilities
The Connection Between Brain Inflammation, Alzheimer's and Parkinson's Disease ...
Pineapples: The Healing Fruit Of The Tropics (Includes A Recipe For Pina-Banana Orange Smoothie)
Eating fresh pineapples can help your body repair itself and increase your sense of well-being. These tropical delights have many health benefits. Fresh pinea...
Why Bank Overdrafts May Be a Bad Deal For You
Banks often say that having overdraft protection on your account is an excellent idea. They might have been right, except for one little thing. Read on to find ...
|
Print this page