Crimeware Spreading Sites Hit Record High

A new quarterly report from the Anti-Phishing Working Group (APWG) states that the number of websites infected with malicious code to steal passwords rose dramatically in June this year, hitting a record high of 9,529, around three times the number of the month before, and 47% greater than the previous record of 6,500 in March.

Many of the attacks come from malicious code being utilized in SQL injection attacks, according to Websense Chief Technology Officer and APWG Phishing Activity Trends Report contributing analyst Dan Hubbard.

At 52% of all attacks, Financial Services was by far the most targeted sector. The report states:

“Financial Services continues to be the most targeted industry sector during the second quarter of 2008. This is consistent with results since APWG began tracking target industry sectors.”

It also notes an “increase in targeted attacks towards social networking sites such as MySpace and Facebook in addition to tax agencies. May and June also saw a massive increase in attacks aimed at cell phone providers and manufacturers."