The next big threat to Web security has less to do with phishing and more to do
with affiliation networks, according to a recent
Web security report by Fijan.
According to Finjan, a San Jose-based Web security provider, hackers are now
using sophisticated affiliation networks that provide a hosting model for
malicious code. Webmasters and bloggers who include the infected code on their
sites are then paid according to the number of infected visitors they
accumulate.
In
an article at NetworkedWorld, Ben-Itzhak, CTO of Finjan said that "pretty much any site can be at risk, as these affiliation
network techniques have even been used when compromising highly popular Web
sites or government domains".
Ronald O'Brien, senior security analyst at anti-spam software provider Sophos said that these malware writers are basically introducing business concepts into there
operation stressing that "They are actually measuring the effectiveness of
their affiliates and paying them accordingly. We have simply never seen this
level of sophistication."