Statistics from Sophos' global surveillance network show that criminals are increasingly fond of using malicious code via web routes rather than email paths.
April Sophos discovered a total of 245,790 malicious code sites. So on average, one day, the company detected 8,193 malicious websites.
Top 10 most dangerous malicious codes in April Picture 1 The most obvious manifestation of the change in attackers' trend is the emergence of 10 new names on the ranking of the most dangerous malicious codes in April. Veteran names are regularly distributed via email. like Netsky or Mytob were absent from the ranking this month.
The number one spot in the April rankings is Mal / Iframe. This malicious code accounts for nearly half of the threats that appear on the Internet in the past month.
The Iframe operation method is similar but the current web attacks. Its goal is to find security vulnerabilities that exist on web pages and insert malicious code into it. If users access these sites, their PC will also be infected with malicious code.
" Iframe attacks are a clear proof of the dangers on the web today. Their goals are the vulnerabilities on websites. They don't need to be concerned that the website has pornographic content or a matching website. France , "said tech consultant Carole Theriault of Sophos.
" 70% of web threats are discovered by Sophos to exist on legitimate websites but there are fatal flaws and have been exploited. Ordinary users also don't know when they access captured websites. That's why their PCs are often infected with malicious code . "