Social Media Center

The Canadian Press just published a new article highlighting a recent Websense® report on cyber security in Canada. According to the report, Canada has become a hotbed for cybercrime as hackers move away from servers in China and Eastern Europe. Canada is now second on the list of countries hosting the most phishing sites, in addition to becoming sixth worst on Websense’s overall list for hosting all cybercrime attacks (as opposed to 13^th from last year).

"That doesn't mean the bad guys are in Canada, it doesn't mean the affected users are in Canada, but it means the Canadian infrastructure is being used to attack against someone in the world.” –Patrik Runald, Websense senior manager of security research

Basic precautions cannot prevent the harmful effects of attacks on this scale: most of the time network administrators can’t even tell that there’s malicious content hiding on their servers. The Canadian Press article calls attention to the Websense Security Labs™2010 Threat Report, which reports that almost 80% of cybercrime scams are on compromised legitimate web servers.

"The attacks we're tracking today are so advanced they're really hard to find unless you know exactly what you're looking for."—Patrik Runald

These findings raise an important issue: older, more traditional forms of web security do not stand a chance against such modern, blended threats. Learn about advanced ways to protect your organization here.

MSNBC just released an article on a malware campaign that the Websense® Security Labs™have been tracking since they discovered it on Tuesday. The campaign, dubbed “LizaMoon” by our Labs, was injected into a huge amount of web pages. The malicious code redirects users to a rogue antivirus website – individuals are told that their computers are infected with a virus that can only be removed by purchasing phony antivirus software.

The BBC posted an article today that outlines a recent malvertising attack through an ad on the popular music streaming site Spotify. The ad did not even need to be clicked on in order to infect a user’s machine – a bogus anti-virus “Windows Recovery” program would pop up and install onto user desktops without their knowledge or consent.