Compromised legit sites power hack attacks

[Juha-Matti Laurio <juha-matti.laurio () netti fi>]

This is something we already know.

"Drive by downloads and targeted attacks, rather than internet worms, have become the favourite attack mechanism, 
according to the latest edition of Symantec's Internet Threat Report, which gives a comprehensive run-down on prices in 
the underground economy.

In the past, users had to visit intentionally malicious sites or click on malicious email attachments to become victim 
of a security threat.
These days, hackers are compromising legitimate websites and using them as a distribution medium to attack home and 
enterprise computers.
Social networking sites such as MySpace and Facebook are a popular target for such attacks, Symantec reports."
--clip--

More at
http://www.channelregister.co.uk/2008/04/08/symantec_threat_report/

We know that an advice Surf to trusted Web sites only is part of history.

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.