Fergie's Tech Blog

Technical Report: Studying Malicious Websites and the Underground Economy on the Chinese Web

Via Honeyblog.org.

Together with the researchers from the Chinese Honeynet Project, we also examined the extend of malicious websites on the Chinese Web. Using high- and low-interaction honeyclients, we were able to find about 2,500 sites (1,49% of overall examined sites) that tried to compromise an unpatched system.

Furthermore, we also studied the underground black market which is used to trade exploits, malware, and stolen virtual goods. Several measurements provide an insight into the black market on the Chinese Web and show that the attackers are organized pretty well. We published our findings as a technical report [.pdf] to share the lessons we learned.

posted by Fergie @ 12/05/2007 09:11:00 AM