Websites are Vulnerable to Malware Attacks

Hackers take advantage of the interconnectedness, interactivity, and interoperability of the web to exploit modern websites' vulnerabilities. The most common website vulnerabilities for malware infections include the use of:

  • "Widgets" such as analytics, polls, video players, or the ability to share with friends.
  • Ads from third-party networks.
  • Vulnerabilities in third-party applications that power various parts of the site.
  • Administrative credentials such as FTP password or SSH login.

Users can download malware to their personal computers or other Internet devices by visiting an infected web page. Infection can occur in many ways, including:

  • Drive-by download, where malware is downloaded without any user interaction.
  • Social engineering malware, in which the user is prompted to take action (such as click a button) that downloads malware. Examples of this include pop-up windows that tell the user that their site is infected ("fake anti-virus" or "scareware") or that prompt the user to download a plug-in or update.
  • Dangerous download, where a user downloads what appears to be a genuine file but that is actually malware.

Web-Based Malware Poses a Serious Threat

If you depend on your website for customers, revenues, transactions, and brand reputation, you are at great risk from web-based malware attacks.

Consider the following findings based on Dasient's research and analysis :

  • Every 0.65 seconds, a new web page is infected.
  • Nearly 4 million web pages on more than 400,000 websites are infected with malware each month.
  • In Q3 2010, more than 1.5 million malvertisements were served online daily - including both drive-by downloads and fake anti-virus campaigns.

Vertical markets most likely to use third-party widgets, ads, or applications on their websites - and therefore most vulnerable to malware infections - include publishers/media, financial, e-commerce, travel/entertainment/leisure, high-tech and other manufacturing, traditional retail, consumer packaged goods (CPG), business services, and healthcare companies.


Sitemap   |   Privacy   |   Careers

Dasient, the leader in Web anti-malware technology, envisions an Internet that is safe and malware-free for users and online businesses. Dasient protects the websites of leading financial services, e-commerce, media, web hosting and other global enterprises from losses of data, revenue and reputation caused by web-based malware attacks. Furthermore, Dasient's adaptive security intelligence re-defines Internet security by scanning the expanses of the Web and harnessing the power of data to mount defenses against future malware attacks.