Researcher: Cleaning Chinese malware sites harder than in US

Over half of all sites spreading malware are based in China, says Stopbadware.org

More than half the sites spreading malicious code are hosted on Chinese networks, an anti-malware group said Wednesday.

Of the over 213,000 malware-hosting sites analyzed last month by Stopbadware.org -- a joint effort of researchers at Harvard, Oxford and several corporations, including Google and Sun Microsystems -- 52 per cent were hosted by servers running Chinese IP addresses. Of the top 10 networks serving malicious code, six are Chinese.

The US hosts 21 per cent of the malware sites, giving it the dubious honor of second place.

Stopbadware.org, which uses data collected by Google's crawlers, wouldn't speculate on what proportion of the sites, Chinese or otherwise, were deliberately hosting malicious code and what fraction were actually legitimate sites that have been hacked. But the dramatic year-to-year growth in the number of sites serving up malware is likely due to a boom in site hacking.

"It's hard to tell how much of the increase is due to Google expanding its efforts [in scanning for malicious sites] but by other reports and researchers, it's reasonable to say that the growing number is in large part due to the growth in [SQL injection] attacks," said Maxim Weinstein, the manager of Stopbadware.org.

With Google fingering only 45,000 to 50,000 sites last year, May's number is up more than 300 per cent. "There's just a much larger number of infected sites out there," said Weinstein.

The number of hacked sites, most compromised through SQL injection attacks, has soared in 2008, with some estimates of the total number of hijacked legitimate pages reaching as high as three million. The problem has become so acute, said Microsoft yesterday, that it and Hewlett-Packard joined forces to launch free tools that site developers and administrators can use to search for vulnerable code and block incoming attacks.

And while Stopbadware.org had some success last year in getting some US-based networks to clean out malware-hosting sites, Weinstein didn't sound as confident that the group could make the same progress with Chinese operators.

"It's a bigger challenge, to be sure," he acknowledged. "We don't understand the landscape nearly as well. We have attempted to contact all the Chinese networks, but we haven't always been successful. It's tougher when you start crossing national and cultural lines."

But Stopbadware.org's is still trying to contact network owners and convince them to shut down deliberate hosts and help legitimate sites eradicate malware that's made it onto their servers, Weinstein said. "We want to get these conversations going," he said. "We've shown that when the parties are willing to talk, the approach works. We hope to see the same sort of approach working in China."

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Gregg Keizer

Gregg Keizer

Computerworld
Show Comments

Essentials

Brother MFC-L3745CDW Colour Laser Multifunction

Learn more >

Mobile

Exec

Sony WH-1000XM4 Wireless Noise Cancelling Headphones

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?