Research: Majority Of Malicious Web Sites Hosted On U.S.-Based Servers


AVG Technologies recently unveiled the results of a research study which shows that -- contrary to popular opinion -- most malicious Web sites are hosted on U.S. servers and not in other countries like China.

The AVG research study is based on the analysis of threats reported during the last six months from AVG’s 110 million worldwide users of its LinkScanner Web security product. The research indicates an increase in malware serving Web sites targeting end users, which typically focus on stealing online banking credentials, credit card information, personal identities and passwords to social sites.

The detection and analysis of exploits was based on AVG’s unique crowd-sourced methods for analyzing web content for malicious or dangerous intent as reported by AVG’s vast network of LinkScanner installations worldwide. AVG’s research shows that malicious code is not just an issue with outlaw servers located in countries with weak laws and lax enforcement.

Monitoring active Web servers serving exploits around the world indicates that 44 percent of the corrupted servers are hosted in the United States, followed by Germany and China at just 5 percent each. Many of these malware-serving websites are legitimate sites compromised by hackers to serve exploits on their behalf. In total, exploitive servers were found in nearly 4,600 locations throughout the United States.

It is important to note that this research makes no statement about who owns or is directing the efforts of these servers -- for those criminals and/or criminal networks could be anywhere in the world -- and they are.

“The results of this study shatter the myth that malicious code is primarily hosted in countries where e-crime laws are less developed,” said Karel Obluk, CTO of AVG Technologies. “Our research shows that malicious content is much more likely to show up on Web servers in the U.S. than one in Asia or Eastern Europe. This makes perfect sense since the USA is a primary target market for the criminals and has rich and mature Internet infrastructure making the threats both highly accessible and cheap to host. What is most striking is the clear rise in the number of malicious servers in the last six months. Today’s hacking techniques are highly evasive so the average user cannot tell if a website is serving malware or not. A Web security product is needed.

“Even more important to note is that, on average during this six month period, about 50 percent of the domains hosted on these servers were online and hosting threats only one day or less. This transient nature makes them very hard to find and add to traditional reputation-based protection systems in time to be helpful to users.”

Featured

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.