{"id":2007,"date":"2011-04-01T07:00:13","date_gmt":"2011-04-01T15:00:13","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2007"},"modified":"2011-04-01T07:00:13","modified_gmt":"2011-04-01T15:00:13","slug":"security-pdf-and-java-the-most-loved-the-most-targeted","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-pdf-and-java-the-most-loved-the-most-targeted\/","title":{"rendered":"Security: PDF and Java, the most Loved, the most Targeted"},"content":{"rendered":"

Websites hosting malware are on the rise, and when people think malware they usually think of problems happening as a result of browser and email flaws and security holes. \u00a0While browser-based security exploits happen, it turns out that many of the exploits happening now are traceable to problems with client-side Java plugins and the trusted and highly popular PDF file. \u00a0In fact, less than 1 percent of all malicious attacks \u00a0were initiated by email.<\/p>\n

A new Cisco report<\/a> detailing the prevalence of malicious websites and malware found that the number of malware exploits increased in 2010 by 139 percent from the previous year. \u00a0The report saw that near the end of 2010 the frequency of malware exploits rose dramatically. \u00a0In October, the average number of exploits that attacked an organization peaked at 250 per month.<\/p>\n

In malware that infects machines via file downloads and attachments, the PDF file format was the most frequent offender. \u00a0As many as 65 percent of all malware files were carried by PDF files. \u00a0That’s up from 52.6 percent from the previous year. \u00a0Paul Wood<\/a>, Senior Analyst at MessageLabs\/Symantec, said <\/a>“PDF-based targeted attacks are here to stay, and are predicted to worsen as malware authors continue to innovate in the delivery, construction and obfuscation of the techniques necessary for this type of malware.”<\/p>\n

But there appears to be an even bigger problem: client machines running old versions of the Java runtime. \u00a0Older versions of the runtime had a significant number of security issues that have since been fixed, yet client machines have not been updated yet to plug the problems. \u00a0 Downloaded Java browser plugin software is being increasingly exploited. \u00a0The problem is very concerning. \u00a0While there are now a large number of PDF exploits, the number of Java-based ones is actually three and a half times greater. \u00a0Oracle is in the process of issuing<\/a> 21 security patches for the Java runtime environment, and of those, 8 are classified as critical fixes.<\/p>\n

The Cisco report does have some good news though. \u00a0It shows that the level of spam hitting people’s email inboxes declined fairly dramatically in 2010. \u00a0This was due in large part by world-wide coordinated efforts to shut down spam farm culprits. \u00a0 Botnet malware for Lethic, Waledac, Mariposa and Zeus were taken down in the first quarter of 2010, followed by shutdowns of Koobface and Bredolab botnets in the fourth quarter. \u00a0At the start of 1010, on average, 380 billion spam messages were sent out daily. \u00a0By the end of 2010 the number of spam messages per day had dropped to 100 billion. \u00a0And spam continues to drop in 2011. \u00a0A security report<\/a> by Symantec<\/a> found that spam in February 2011 dropped by 2.2 percent.<\/p>\n

Interestingly the report notes that the nature of spam is changing. \u00a0Historically most spam had been motivated by economic reasons — trying to sell products, but increasingly spam messages are motivated for political reasons.<\/p>\n

<\/div>\n
\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Websites hosting malware are on the rise, and when people think malware they usually think of problems happening as a result of browser and email flaws and security holes. \u00a0While browser-based security exploits happen, it turns out that many of…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2007","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2007","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2007"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2007\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}