21 Aug 2009
Firefox and Opera appear to be the browsers of choice for hackers running web sites that launch drive-by malware attacks, according to new research.
Paul Royal, a security researcher with web security service provider Purewire, is reported to have obtained the data after infiltrating the toolkits used by hackers to carry out these attacks, such as LuckySploit and UniquePack.
The research found that 46 per cent of the hackers use Firefox, while surprisingly Opera is second with 26 per cent, despite having just a two per cent market share.
Ironically, the hackers are using browsers with a smaller market share in order to avoid being hacked themselves, according to Rik Ferguson, senior security advisor at Trend Micro.
"They don't want to get compromised themselves," he said. "They stand to lose a lot - the profits of their criminal operations, control of botnets and so on - so they're looking after themselves."
However, Ferguson warned that Firefox and Opera are not intrinsically more secure than Microsoft's Internet Explorer, or other browsers, just that they have a smaller footprint and do not attract as much attention from malware writers.
As an example, Opera version 9.x currently has 22 security advisories against it and 50 vulnerabilities, 68 per cent of them highly critical, according to the latest intelligence from vulnerability scanning firm Secunia.
Latest stories from Security
Related videos
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Java Developer Thomas Cook Online is the business unit...
Contract Systems Administrator, Southampton My...
PHP Web Developer required to join my market-leading...
Java Developer x2, Spring, Hibernate, Swindon, £40K...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
what Secunia says about the best browser on earth...
I found this in the Secunia page: Vendor: Opera Software Affected By 22 Secunia advisories 50 Vulnerabilities Monitor Product Receive alerts for this product Unpatched 0% (0 of 22 Secunia advisories) Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..
Posted by: Hector 26 Aug 2009
Lower Share & more Security
Get it right. Firefox & Opera are much more secure than IE to begin with so if you know that the browser is insecure, bcoz you can hack into it, why would you use it as your browser.
Posted by: Rex Alfie Lee 21 Aug 2009