21 Aug 2009
Firefox and Opera appear to be the browsers of choice for hackers running web sites that launch drive-by malware attacks, according to new research.
Paul Royal, a security researcher with web security service provider Purewire, is reported to have obtained the data after infiltrating the toolkits used by hackers to carry out these attacks, such as LuckySploit and UniquePack.
The research found that 46 per cent of the hackers use Firefox, while surprisingly Opera is second with 26 per cent, despite having just a two per cent market share.
Ironically, the hackers are using browsers with a smaller market share in order to avoid being hacked themselves, according to Rik Ferguson, senior security advisor at Trend Micro.
"They don't want to get compromised themselves," he said. "They stand to lose a lot - the profits of their criminal operations, control of botnets and so on - so they're looking after themselves."
However, Ferguson warned that Firefox and Opera are not intrinsically more secure than Microsoft's Internet Explorer, or other browsers, just that they have a smaller footprint and do not attract as much attention from malware writers.
As an example, Opera version 9.x currently has 22 security advisories against it and 50 vulnerabilities, 68 per cent of them highly critical, according to the latest intelligence from vulnerability scanning firm Secunia.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
EU data protection overhaul contains "bureaucratic tick box-proposals", says information commissioner Christopher Graham in exclusive interview with V3
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Contract Project Manager - London - 6 months - £400-430...
Head of User Experience. International Social Networking...
Senior Accounting and Finance Systems Business Analyst...
Contract C# Developer My well established client are...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
what Secunia says about the best browser on earth...
I found this in the Secunia page: Vendor: Opera Software Affected By 22 Secunia advisories 50 Vulnerabilities Monitor Product Receive alerts for this product Unpatched 0% (0 of 22 Secunia advisories) Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..
Posted by: Hector 26 Aug 2009
Lower Share & more Security
Get it right. Firefox & Opera are much more secure than IE to begin with so if you know that the browser is insecure, bcoz you can hack into it, why would you use it as your browser.
Posted by: Rex Alfie Lee 21 Aug 2009