Report: Videos, Installers, Cracks, Social Media Popular Baits Used By Hackers

PandaLabs, the anti-malware laboratory of Panda Security, The Cloud Security Company, has released a study on the nature of malware-infected websites that were blocked by the company's antivirus solutions in Q1 2011.

According to the research, 25 percent of sites used video and multimedia content as bait; 21.63 percent referred to installers or program updates; 16.53 percent claimed to contain cracks and keygens and 16 percent were social media URLs.

A crack is a small software application that serializes a piece of commercial software and enables users to operate any software application. It also enables hackers to illegally modify software, such as remove protectors like the trial/demo version, serial number, CD checks and any other software protection method.

"Users continue to fall victim to malicious links offering to take them to an exciting video or the new episode of their favorite TV show. This technique has become a weapon of choice for hackers as it requires minimum investment and attracts a large number of victims," said Luis Corrons, Technical Director of PandaLabs. "Most of these sites download Trojans onto users' computers without their knowledge. Therefore, a good security solution capable of blocking them proactively is extremely helpful for users who, in most cases, can't distinguish between 'good' and 'malicious' websites." 

eBooks are in fifth place on the list comprising 5.25 percent of occurrences, followed by Peer-to-peer (P2P) downloads and adult content. The ranking rounds out with sites offering software programs, operating systems, browsers, videogames and antivirus software (all of them used in less than three percent of cases).

The three most blocked sites by Panda Security in Q1 2011 were three Brazilian web pages. The first was a video released by the Japanese consulate showing the rescue of a group of tsunami survivors; the second, a video supposedly showing a short circuit causing the death of 15 people; and the third supposedly contains footage of a police officer being fired because of his Internet activities.

"Attackers exploit hot topics and users' morbid curiosity," Corrons said. "Who isn't interested in watching the latest footage of such a devastating natural disaster as Japan's recent earthquake?"

The study shows user preferences in relation to the malware lures used. When taking a look at P2P applications, Panda found that the most popular program is Ares, followed by Torrent and eMule. As for social networks, Facebook tops the list ahead of Messenger, Tuenti and MySpace.

The most searched for operating system is Windows, followed by Mac and Linux. Finally, Explorer still dominates the web browser market, with Firefox and Chrome trailing behind.

"There are no hidden secrets when it comes to finding out if a website is legitimate or not, but it is becoming increasingly complicated for users to differentiate them. Unfortunately, many users don't know if their security system is good enough to protect their systems, which is where a lot of these problems originate," Corrons said.

Featured

  • Using Modern Technology

    Using Modern Technology

    Workplace violence is a serious and growing challenge for many organizations — including those in the healthcare industry. Read Now

  • The Core Value Proposition

    The Core Value Proposition

    Machine and deep learning algorithms are everywhere in our lives. Masquerading as AI, they are only in their infancy. Have a conversation with a ChatGPT chatbot, and it becomes clear just how far we have come in a short time and how far we have to go. Read Now

  • Progressing in Capabilities

    Progressing in Capabilities

    Hazardous areas within industries like oil and gas, manufacturing, agriculture and the like, have long-sought reliable video surveillance cameras and equipment that can operate safely in these harsh and unpredictable environments. Read Now

  • A Comprehensive Nationwide Solution

    A Comprehensive Nationwide Solution

    Across the United States, manufacturing facilities, distribution centers, truck yards, parking lots and car dealerships all have a common concern. They are targets for catalytic converters. In nearly every region, cases of catalytic converter thefts have skyrocketed. Read Now

Featured Cybersecurity

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • FlexPower® Global™ Series (FPG) from LifeSafety Power

    FlexPower® Global™ Series (FPG) from LifeSafety Power

    The FlexPower® Global™ Series (FPG) from LifeSafety Power—designed to provide DC power for access control systems in international applications—is now PSE listed for Japan and compatible with the country’s 100VAC applications. 3

  • BIO-key MobileAuth

    BIO-key MobileAuth

    BIO-key International has introduced its new mobile app, BIO-key MobileAuth™ with PalmPositive™ the latest among over sixteen strong authentication factors available for BIO-key's PortalGuard® Identity-as-a-Service (IDaaS) platform. 3