Danger from the web over malicious email

Trend Micro security firm forecasts that next year the number of web-based attacks will be more from email.

Email is now considered a traditional attack method. Trojans and other types of malware are often hidden in email messages that come into the user's mailbox and then break into the user's PC.

But the current situation has begun to change. The Web is slowly becoming the "favorite" tool to attack hackers' PCs.

Speaking to the participants of Gartner Symposium & ITxpo, Mr. Raimund Genes - Trend Micro's research director - confirmed that in 2008 most threats to Internet users will be put on the web.

The cause of the trend change is very simple. Currently email security tools have become familiar to users. Meanwhile, there is almost no security tool to control network data traffic. Security firms also have to admit that it is not an easy task to secure the intrusion into PCs and networks through port 80.

Demonstrate the danger of danger on the web Mr. Genes gives an example of the website Dolphin Stadium. This site has been abducted by hackers and used to install malicious software on users' PCs.

Cat chasing game

The situation between security firm and hackers is exactly the same as cat chasing games. Hackers look for new security vulnerabilities for new malware tools to attack users and security vendors often have to follow the cleanup.

Even today hackers form a black market specialized in trading security flaws.

" The profits from malicious code are the driving force behind the development of web threats ," Genes said. " The last virus came out in 1999. Since then, there have been only computer worms and web threats ."

For example, hackers are willing to pay up to $ 75,000 for a security error in Windows XP and 50,000 operating systems for errors in Windows Vista. Even security companies such as iDefense or TippingPoint hang 12,000 for a security error.

Not that the world security industry doesn't care about the dangers of the web because the job of securing secure corporate network traffic has specialized companies like Websense, Surf Control and ScanSafe. These firms all have products that allow blocking malicious web traffic.

" But it is true that security companies are still unable to catch up with hackers. Security often has to chase hackers and not block them ," Genes said.

Hoang Dung