(MARKET WIRE via COMTEX News Network) -- Websense, Inc. (NASDAQ: WBSN) today revealed the findings from its bi-annual research report Websense Security Labs, State of Internet Security, Q3-Q4 2008.
Key facts from the report:
* 70% of the top 100 most popular Websites either hosted malicious content or contained a masked redirect to lure unsuspecting victims from legitimate sites to malicious sites. This represents a 16% increase over the last six-month period, according to new research released today from Websense Security Labs. The top 100 most popular Websites, many of which are social networking, Web 2.0 and search sites, represent the majority of all Web page views and are the most popular target for attackers.
* In the second half of 2008 more than 77% of the Websites Websense classified as malicious were actually sites with seemingly "good" reputations that had been compromised by attackers. This percentage is up slightly from 75% in the first half of 2008.
* The number of malicious Websites identified by Websense Security Labs from January first 2008 through January first 2009 has increased by 46%.
* Websense Security Labs found that 39% of malicious Web attacks included data-stealing code, demonstrating that attackers are after essential information and data.
* The Web continues to be the most popular vector for data-stealing attacks. In the second half of 2008 the Websense Security Labs found that 57% of data-stealing attacks are conducted over the Web, representing a 24% increase over the six-month period.
* The convergence of blended Web and email threats continues to increase. Websense Security Labs reports that 90.4% of all unwanted emails in circulation in the second half of 2008 contained links to spam sites and/or malicious Websites. This represents a nearly 6% increase in e-mails containing a malicious links to compromised sites.
* Websense Security Labs uses the patent-pending Websense ThreatSeeker Network to discover, classify and monitor global Internet threats and trends. Security researchers use the Internet security intelligence from the system, which includes more than 50 million real-time data collecting systems that parse one billion pieces of content daily, to publish security trends and protect customers.
Links:
Podcast:
eWeek podcast: 2009 security predictions with Websense chief technology Officer Dan Hubbard
http://www.eweek.com/c/a/Security/Security-Outlook-2009/
Del.icio.us:
http://del.icio.us/informationprotection
Websense Security Labs ThreatSeeker Network Whitepaper:
http://www.websense.com/welcome/MiscLandings/ThreatSeekerNetwork/index.php
Whitepaper: Enabling Enterprise Web 2.0
http://www.websense.com/site/docs/whitepapers/en/WebsenseCIOWebWP_fin0904.pdf
Follow Websense Security Labs on Twitter:
http://twitter.com/websenselabs
Websense News RSS feed:
All Websense News RSS Feed
Websense Security Labs Alerts RSS feed:
http://securitylabs.websense.com/content/alertsRSS.xml
Websense Security Labs Blog RSS feed:
Share
Websense, Inc.
Websense, Inc. (NASDAQ: WBSN), a global leader in integrated Web, data and email security solutions, provides Essential Information Protection™ for more than 43 million employees at more than 50,000 organisations worldwide. Distributed through its global network of channel partners, Websense software and hosted security solutions help organisations block malicious code, prevent the loss of confidential information and enforce Internet use and security policies. For more information, visit http://www.websense.com/.
Websense is a registered trademark of Websense, Inc. in the United States and certain international markets. Websense has numerous other registered and unregistered trademarks in the United States and internationally. All other trademarks are the property of their respective owners.
Quote:
Websense Chief Technology Officer Dan Hubbard -- "In the last six months criminals have really stepped up their game in a few notable areas. Spammers are increasingly using links to malicious Web sites and spam sites in their email campaigns to lure users and evade security systems that lack Web intelligence. We're also seeing an increase in cybercriminals taking advantage of the growing number of Web 2.0 properties that allow user generated content. More than ever we're seeing attackers inject Web sites with links and iFrames to direct users to malicious and compromised sites with the ultimate purpose of stealing data."