| By Open Source News | Article Rating: |
|
| June 26, 2006 08:15 AM EDT | Reads: |
5,864 |
The world of malware has become professionalized in recent years. Phishing and spoofing aim to get credit card and other potentially valuable personal information more than they intend to simply wreak havoc. The day of the teenage hacker being criminally naughty has been replaced by mature gangs being criminally organized and profitable. Cyberanarchism also remains a part of the wonderful world of malware.
And the newly emerging world of AJAX development looks to be as prone to this trend as traditional sites. Recent reports have found that cyber criminals are following people who are "(turning) to Web applications for everyday tasks like e-mail, friendship and payments...in search of bank account details and other valuable data, security researchers said," according to a recent Associated Press report.
No longer are Microsoft Explorer and Office applications the great sieves for malware developers; recent attacks have focused on Yahoo, Google, and eBay, for example. The concern among security experts is that these sites, as well as popular community-based sites such as MySpace will become the prime targets of leading-edge malware.
Software that loads malicious programs through ostensible photo links are not new, but their presence is increasing.
ne of the latest discoveries, announced earlier this month by FaceTime Security Labs, is a worm attacking Orkut. As a quote in the recent Associated Press story said, "The bad guys are just stepping up a level and becoming a lot more malicious in what they're trying to do," according to Chris Boyd, a FaceTime security research manager who discovered a worm that attacked users of the Orkut site. "Sadly, it's quite a brilliant idea, and we'll probably see a lot more of it in the months to come."
AJAX developers may find themselves in the middle of this new malicious trend, with their Javascript creations under increasing attack as the new generation of Rich and Web 2.0 era sites are developed and evolve. The only silver lining so far in this new battle is that website owners can quickly patch their sites for all users, rather than having to direct users to download specific patches in the manner in which Microsoft must always react to the latest attacks on its software.
And the newly emerging world of AJAX development looks to be as prone to this trend as traditional sites. Recent reports have found that cyber criminals are following people who are "(turning) to Web applications for everyday tasks like e-mail, friendship and payments...in search of bank account details and other valuable data, security researchers said," according to a recent Associated Press report.
No longer are Microsoft Explorer and Office applications the great sieves for malware developers; recent attacks have focused on Yahoo, Google, and eBay, for example. The concern among security experts is that these sites, as well as popular community-based sites such as MySpace will become the prime targets of leading-edge malware.
CIO, CTO & Developer Resources
Software that loads malicious programs through ostensible photo links are not new, but their presence is increasing.
ne of the latest discoveries, announced earlier this month by FaceTime Security Labs, is a worm attacking Orkut. As a quote in the recent Associated Press story said, "The bad guys are just stepping up a level and becoming a lot more malicious in what they're trying to do," according to Chris Boyd, a FaceTime security research manager who discovered a worm that attacked users of the Orkut site. "Sadly, it's quite a brilliant idea, and we'll probably see a lot more of it in the months to come."
AJAX developers may find themselves in the middle of this new malicious trend, with their Javascript creations under increasing attack as the new generation of Rich and Web 2.0 era sites are developed and evolve. The only silver lining so far in this new battle is that website owners can quickly patch their sites for all users, rather than having to direct users to download specific patches in the manner in which Microsoft must always react to the latest attacks on its software.
Published June 26, 2006 Reads 5,864
Copyright © 2006 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.
More Stories By Open Source News
Enterprise Open Source News Desk trawls the fast-growing world of Professional Open Source for business-relevant items of news, opinion, and insight.
Most Recent Comments
![]() |
SYS-CON Australia News Desk 06/26/06 08:09:49 AM EDT | |||
A recent worm targeted Yahoo and potentially insecure Javascript code written as part of the increasingly popular AJAX approach to website development. Expect new malware to continue this trend. |
||||
- Asynchronous Logging Using Spring
- What to Expect in 2012: Cloud Computing and Open Source Software
- Will PaaS Finally Bring Open Source Love to the Enterprise?
- AT&T Joins OpenStack, Floats Cloud Architect
- Red Hat Sets Up GlusterFS Advisory Board
- Linux Virtualization and Tired Open Source Myths
- OpenOffice.com Lives
- Acquia Announces Two New Board Members
- Cloud Computing: A Platform-First Approach
- Powering the Cloud with Open Source
- Top 10 Open Source eCommerce Software (Joomla and Drupal)
- Piston Delivers First OpenStack-Based Cloud OS
- Adobe Sends Flex to the Apache Foundation
- i-Technology in 2012: Five Industry Predictions
- Microsoft Tries Hadoop on Azure
- OpenXava 4.3: Rapid Java Web Development
- Asynchronous Logging Using Spring
- StorSimple Supports OpenStack
- What to Expect in 2012: Cloud Computing and Open Source Software
- Will PaaS Finally Bring Open Source Love to the Enterprise?
- AT&T Joins OpenStack, Floats Cloud Architect
- More Use Cases for Big Data Analytics
- Red Hat Sets Up GlusterFS Advisory Board
- Linux Virtualization and Tired Open Source Myths
- After Ubuntu, Windows Looks Increasingly Bad, Increasingly Archaic, Increasingly Unfriendly
- SCO CEO Posts Open Letter to the Open Source Community
- Simula Labs Launches Hosted Delivery Platform To Enable Enterprise Open Source Adoption
- Where Are RIA Technologies Headed in 2008?
- Source Claims SCO Will Sue Google
- How Open Is "Open"? – Industry Luminaries Join the Debate
- Latest SCO News is Plain Weird
- SCO Claims Linux Lifted ELF
- IBM Tells SCO Court It Can't Find AIX-on-Power Code
- Flashback: Investing in 'Professional Open Source' - Exclusive 2004 Interview with David Skok, Matrix Partners
- Developing an Application Using the Eclipse BIRT Report Engine API
- HP Starts Pushing Desktop Linux



















