Home > Domino News > Data shows spyware becoming 'global pandemic'
Domino News:
EMAIL THIS

Data shows spyware becoming 'global pandemic'

By Eric B. Parizo, News Editor
10 Nov 2005 | SearchSecurity.com

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   

No matter where you are or how big you are, if your organization hasn't been affected by spyware yet, it's only a matter of time.

That's the message from Boulder, Colo.-based Webroot Software Inc. According to the antispyware vendor's quarterly "State of Spyware" report released this week, the spread of secret nefarious and malicious programs has quickly become a "global pandemic."

Webroot CEO C. David Moll said spyware is no longer confined to a handful countries or a single continent. In fact, it's everywhere.

Moll said his customers have reported spyware problems in 223 countries. What's more, unlike spam, which he said took nearly two years to plague users around the world, spyware has become the scourge of Internet users everywhere in just a matter of months.

Whenever, wherever

As further illustration, Webroot's report finds the trio of countries with the highest spyware infection rates represent three different corners of the globe. This is based on an survey of 63 companies representing 351,149 PCs and laptops connected to the Internet, according to study details.

The U.S. was found to have the highest national spyware infection rate, with an average of 24.4 spyware programs per scanned PCs.

Ranking second was the U.K. with an average infection rate of 18.7 programs, with Thailand rounding out the top three with 18.1 programs.

What do those nations have in common? Moll said each has a vast broadband network, and a sizable portion of its population using it.

"A broadband user does more things like file sharing and spends more time online, and tends to be a more sophisticated user," Moll said, adding that it's those uses who are more likely to experiment with peer-to-peer programs, surf to new Web sites and download shareware, all of which drive spyware proliferation.

The more things change…

Webroot's survey was compiled using data from customers of its Web-based antispyware application, and from a poll of corporate IT professionals in charge of security compliance.

Of those who responded to the poll, more than two-thirds categorized spyware as a serious threat to their organizations, and 97% said they worry that spyware may access employee data, pilfer intellectual property or access company or customer information.

The vendor issued a similar report last quarter, and Moll said overall spyware awareness has increased from quarter to quarter, but tragically that hasn't equated to progress in combating its proliferation.

"So many states are taking action, and Federal bills are in consideration, so when you take all of that together, you might expect to see some [progress]," Moll said. "Frankly, we don't."

The 80% infection rate is roughly the same as when Webroot began its quarterly research effort, Moll said, and the most serious kinds of spyware programs -- Trojans and keystroke loggers -- continue to grow.

Key to the highway

Another significant finding of Webroot's report is that keystroke loggers -- programs that monitor and often transmit data on how a keyboard is used -- are posing a bigger threat than ever before.

Moll said keystroke loggers are becoming increasingly sophisticated. They are emerging as the biggest threats to consumer privacy and data security on the Internet, and may soon surpass phishing as the most widely exploited method of electronic identity theft.

"Phishing has served as the traditional model for getting somebody to a Web site to steal their information," Moll said. "It's been failing more often as people become more educated about it, but to get a piece of software on a user's machine gives the same opportunity [to steal] usernames, account numbers, etc."

It poses an even greater threat in the corporate environment, Moll added, because the stakes are much higher when comparing an individual's finances to those of billion-dollar enterprises.

"What happens when a keystroke logger is sitting on a payroll PC, or account payable, or on a trading desk?" Moll asked. "When huge amounts of money are being transferred, it represents a grave threat to corporations, as well as in regard to corporate espionage and intellectual property theft."

Lessons learned

Fortunately, Moll said, corporate spyware awareness continues to rise, and that may be the difference in preventing a major spyware-related security breach or data theft.

He also said the work of the Anti-Spyware Coalition, a coalition of more than two dozen technology vendors and interest groups, is helping to more clearly define spyware and aid antispyware vendors in searching for and removing it.

However, there is still work to be done. Moll said the industry must realize that antispyware software is now just as essential as antivirus software. Those that don't understand that, he said, are putting themselves at risk.

"Don't hope that you're going to browse to a new Web site and be OK," Moll said. "It only takes one mistyped URL to bring spyware down in spades."

This article originally appeared on SearchSecurity.com



Tags: IndustryLotus Notes Domino Phishing and Email Fraud ProtectionLotus Notes Domino Antivirus Software and Virus ProtectionVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Industry
Lotus makes mobile partnerships and Notes Traveler top priorities
IBM Lotus to end Notes/Domino 7.x support
Are you ready for LotusLive hosted email services?
Getting ready for Lotusphere 2009
Managing and maintaining mobile devices on Lotus Notes Domino
Considerations for deploying mobile devices on Lotus Notes Domino
Admin2008: administrators and developers speak up
Developers mixed on direction of IBM Lotus R&D
IBM showcases Notes/Domino 8.5; new products at Lotusphere
Looking forward, IBM Lotus needs back-end improvements

Lotus Notes Domino Phishing and Email Fraud Protection
Phishing protection primer for Lotus Notes and Domino
New tools fight fraud and phishing
Hooked: Phishing is luring more and more of your customers
Fight spear phishing
Phishing: A whale of a problem for enterprises
Three ways phishers are hooking you
New phishing threat outpaces Netsky-P
Phishing secrets revealed
PhishTank casts its net for malicious email
SMS phishing is here

Lotus Notes Domino Security
How to correct Lotus Notes public key mismatches in four easy steps
Cracked users' HTTP passwords still a threat on many Lotus Notes R6 and R7 domains
Top 10 Notes/Domino administration tips of 2006
Unsecured devices worry IT professionals
Online crime as ugly as ever
McAfee sued for patent infringement
Mobile security starts with policy
Antivirus researcher Gullotto leaves Symantec for Microsoft
Symantec: Searching for a strategy?
Symantec says enterprises failing to secure instant messaging

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Lotus Notes Server Solutions - Quickr, Domino Server, Websphere
HomeTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersDomino IT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 1999 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts