Web Threats: The rise of pharming

Using a combination of various files and techniques, rather than a single file or approach, Web threats are sophisticated in their methods, and they are on the rise.

According to Trend Micro Incorporated (TSE: 4704, NASDAQ: TMIC), a leader in network antivirus and Internet content security software and services, a new breed of crimeware called 'pharming' is on the rise. Pharming misdirects users to fraudulent sites or proxy servers, typically through DNS hijacking or poisoning, to either steal information or expose the user to infection. Publishing malicious links in search engines, discussion forums, and other social networking sites to infect a wide-base of users is another delivery method that is gaining momentum in the Web threat arena. To add to this growing crime wave, cyber criminals use creative social engineering tactics to entice or trick their victims into clicking the link and visiting the tainted site.

"Commonly, Web-based attacks are distributed via emails that contain URLs directing users to malicious Web sites," says Samir Kirouani, senior sales engineer, Trend Micro Middle East and Africa. "Web-based attacks use a variety of methods like browser rendering exploits in media files (e.g., image, animation, video, and audio files) that either drop or download malicious files are prevalent techniques. ActiveX controls or drive-by downloads either force the user to download to continue viewing or automatically push down a malicious file. Infection is propagated via stealth update downloading of multiple sets of codes to avoid detection with traditional scanners."

Web threats manifest themselves in several forms, depending upon the desired outcome of the instigator. Some examples are:

• Spyware or applications that steal data or information from a system and send it onto other people
• Adware, data miner, or pop-ups that serve commercial interests
• Browser Helper Objects that taint search engine results or monitor user browsing habits to collect info about user interests (e.g., goods or services) and feed them marketing ads
• Bots (code that can be remotely controlled to take malicious actions) or zombies that receive commands through the Web

"The pervasive use of the Web and the complexity of protecting against Web threats, combine to form perhaps the greatest challenge to protecting the privacy of personal information and the confidentiality of business information in a decade. Traditional means do not provide adequate protection from these threats. Advanced, multi-layered security solutions are required to offset this increasingly complex threat vector," Kirouani adds.