Amazon Leads in Hosting Malware: Report

Wednesday, July 16, 2014 @ 02:07 PM gHale

Amazon leads the pack for global ISPs and hosting providers that hosted malware out of more than 21,000 ISPs.

Amazon remained the top malware-hosting ISP and saw an increase of approximately 250 percent, while Q4 13’s second-most afflicted ISP, GoDaddy, fell 12 percent, according to a report from Solutionary, which analyzes the threat landscape.

RELATED STORIES
Mfg Industry getting Malware-Laden Scanners
Malware Down, but Infrastructure Remains
Vulnerability Patched After 20 Years
Java to Android Ransomware Rescue

“From an organizational perspective, attention to detail, especially the security basics, is often enough to deter a malicious individual or group of individuals,” said Rob Kraus SERT director of research at Solutionary. “The tricky part of information security, and the reason we must always be mindful of the trends in the industry, is that the second you make it more difficult for a malicious actor, they have already moved on the next weak link.”

Other key findings of the Solutionary report:
• GoDaddy, a hotbed for malware hosting in the past, saw a sharp decrease. GoDaddy accounted for 2 percent of malware hosted by the qualifying ISPs, down from 14 percent in 2013. While this may indicate improved efforts to identify and shutdown domains actively hosting malware, it is possible malicious actors have simply moved on to other, smaller service providers such as Akrino and Website Welcome.
• U.S. is still the number one malware-hosting nation. The United States extended its lead from 44 percent of hosted malware tracked in Q4 2013 to 56 percent in Q2, 2014. France, Germany and China represent the next largest samples respectively.
• France, Virgin Islands and Ireland all see increase in hosted malware; Germany, The Netherlands, Russia, UK and Canada decrease. The decrease of malware in Russia is likely from a string of arrests related to malware development, including a large portion of the ring responsible for the BlackHole exploit kit.
• Top 10 ISPs represent are the source of more than half malware identified. Data shows from more than 21,000 ISPs associated with captured malware samples, the top 10 were the source of 52 percent of the malware identified in the new period.



Leave a Reply

You must be logged in to post a comment.