Syria Files - Blue Coat Examines Malware Ecosystems in 2011 Mid-Year Web Security Report

The Syria Files,
files released so far...
260
The Syria Files

### Index pages

List of Releases

### by Date of Document

2006
2007
2008
2009
2010
2011
2012

### by Date of Release

2012-07-05
2012-07-06
2012-07-08
2012-07-09
2012-07-10
2012-07-11
2012-07-15
2012-07-16
2012-07-17
2012-07-18
2012-07-19
2012-07-22
2012-07-25
2012-07-28
2012-07-29
2012-08-01
2012-08-03
2012-08-17

### Media Publishing

Al Akhbar - Lebanon
Al Masry Al Youm - Egypt
L'Espresso - Italy
NDR/ARD - Germany
Owni - France
Publico.es - Spain

### Community resources

Supporters Support Wikileaks Follow us on Twitter Twitter this Follow us on Facebook

courage is contagious

# The Syria Files

Thursday 5 July 2012, WikiLeaks began publishing the Syria Files – more than two million emails from Syrian political figures, ministries and associated companies, dating from August 2006 to March 2012. This extraordinary data set derives from 680 Syria-related entities or domain names, including those of the Ministries of Presidential Affairs, Foreign Affairs, Finance, Information, Transport and Culture. At this time Syria is undergoing a violent internal conflict that has killed between 6,000 and 15,000 people in the last 18 months. The Syria Files shine a light on the inner workings of the Syrian government and economy, but they also reveal how the West and Western companies say one thing and do another.

## Blue Coat Examines Malware Ecosystems in 2011 Mid-Year Web Security Report

Released on 2012-08-17 10:00 GMT

Email-ID | 1895662
Date | 2011-07-11 02:21:13
From | colin@procre8.biz
To | info@infomag.news.sy

Dear Editor,
if !supportEmptyParas]> endif]>
Blue Coat Systems has just published its 2011 Mid-Year Security Report. Your readers will be interested to learn about the findings of the report as it is very informative.
if !supportEmptyParas]> endif]>
The report examines Web-based malware ecosystems – the sites that host the malware, the attack infrastructure and the user/ consumer behavior that turns them into victims of the attack. Cyber-thieves are targeting popular sites including Facebook to
spread ‘identity detecting’ malware infections. The report names ‘Search Engine Poisoning’ as the biggest threat.
if !supportEmptyParas]> endif]>
Below is the press release. To learn more about Web-based malware ecosystems, you can read the full 2011_Mid-Year_Web_Security_Report.
if !supportEmptyParas]> endif]>
Picture attached: Graphic of the Shnakule malware delivery network
if !supportEmptyParas]> endif]>
Best regards,
Colin
if !supportEmptyParas]> endif]>
if !vml]>[cid:image002.jpg]endif]>
if !supportEmptyParas]> endif]>
if !supportEmptyParas]> endif]>
if !supportEmptyParas]> endif]>
Blue Coat Examines Malware Ecosystems in 2011 Mid-Year Web Security Report
if !supportEmptyParas]> endif]>
Report Identifies 10 Largest Malware Delivery Networks and Traces User Entry Points into the Networks
if !supportEmptyParas]> endif]>
DUBAI, United Arab Emirates, July 11, 2011 – Blue Coat Systems, Inc. (Nasdaq: BCSI), a leading provider of Web_security and WAN_optimization solutions, today released its 2011 Mid-Year Web Security Report, which examines Web-based malware ecosystems,
including the 10 largest malware delivery networks. These malware delivery networks are typically hosted across multiple sites and are responsible for launching dynamic attacks on unsuspecting users. The report examines the interactions of Web-based
malware ecosystems, including user behavior, hosting sites and delivery networks.
if !supportEmptyParas]> endif]>
“Web-based malware has become so dynamic that it is nearly impossible to protect every user from every new attack with traditional defenses,” said Nigel Hawthorn, VP EMEA Marketing at Blue Coat Systems. “With a unique comprehensive view of the Web
ecosystem, Blue Coat Web security solutions can identify and track malware networks to proactively protect customers from new attacks that these networks attempt to launch.”
if !supportEmptyParas]> endif]>
For the first half of 2011, Shnakule was the leading malware delivery network, both by size and effectiveness. On average during that period, this network had 2,000 unique host names per day with a peak of more than 4,300 per day. It also proved the
most adept at luring users in, with an average of more than 21,000 requests and as many as 51,000 requests in a single day. Shnakule is a broad-based malware delivery network whose malicious activities include drive-by downloads, fake anti-virus and
codecs, fake flash and Firefox updates, fake warez, and botnet/command and controls. Interrelated activities include pornography, gambling, pharmaceuticals, link farming, and work-at-home scams.
if !supportEmptyParas]> endif]>
Not only is Shnakule far reaching as a standalone malware delivery network, it also contains many large component malware delivery networks. Ishabor, Kulerib, Rabricote and Albircpana, which all appear on the top 10 list of largest malware delivery
networks, are actually components of Shnakule and extend its malicious activities to gambling-themed malware and suspicious link farming.
if !supportEmptyParas]> endif]>
The 2011 Mid-Year Web Security Report also analyzes how and where on the Internet users are brought into malware delivery networks. In the first half of 2011, search engine poisoning was the most popular malware vector. In nearly 40 percent of all
malware incidents, Search Engines/Portals were the entry point into malware delivery networks. Unsurprisingly, Search Engines/Portals were also the most requested Web content during the same time period. Social Networking was the fifth most popular
entry point into malware delivery networks and the third most requested content.
if !supportEmptyParas]> endif]>
While cybercrime typically targets users where they spend the most time, as in the case of search engines and social networking, in the first half of 2011, they also used traditional methods, such as email and pornography. Email was the third most
popular category of Web content used to drive users to a malware network although the category only ranked as the 17th most requested category. Pornography, a longtime favorite malware target, was virtually tied with Email and was the 4th most popular
way to lure users to malware, although it was only the 20th most requested category.
if !supportEmptyParas]> endif]>
After analyzing the dynamic and interrelated nature of Web-based malware ecosystems, the 2011 Mid-Year Web Security Reportconcludes that:
if !supportEmptyParas]> endif]>
if !supportLists]>· endif]>Malware hosting is often found within categories, such as Online Storage and Software Downloads, that companies typically allow in acceptable use policies.
if !supportLists]>· endif]>Businesses should consistently block Pornography, Placeholders, Phishing, Hacking, Online Games and Illegal/Questionable categories to follow best practices for Web security.
if !supportLists]>· endif]>Searching for images and pirated media ranks at the top of the list for possible malware delivery, and users engaging in these activities are especially vulnerable.
if !supportLists]>· endif]>A single defense layer, such as a firewall or anti-virus software, is insufficient to protect against the dynamic nature of malware and the extensive infrastructure of malware delivery networks. Instead, businesses need
the real-time protection and intelligence that a cloud-based Web defense can deliver as it quickly expands and adapts to new threats.
if !supportEmptyParas]> endif]>
To learn more about Web-based malware ecosystems, read the full 2011_Mid-Year_Web_Security_Report.
if !supportEmptyParas]> endif]>
The data in the report is derived from the Blue Coat WebPulse™ collaborative cloud defense and analyzed by the Blue_Coat_Security_Labs. WebPulse unites over 75 million users in a real-time web defense and provides a comprehensive view into Web ecosystems
by rating and analyzing nearly 3 billion real-time URL requests per week. With its view into the Web, WebPulse can map malware delivery networks and correlate dynamic lures with delivery paths and dynamic payloads to provide real-time protection against
new and emerging threats.
if !supportEmptyParas]> endif]>
WebPulse provides on-demand intelligence for the Blue Coat Web Security product portfolio, including its Secure Web Gateway solution and the Blue Coat Cloud Service. WebPulse uniquely protects against malware downloads, phishing and spear-phishing
attacks, and malicious call-home traffic from botnet infected systems that require remediation.
if !supportEmptyParas]> endif]>
-Ends-
if !supportEmptyParas]> endif]>
About Blue Coat Systems
Blue Coat Systems is a leading provider of Web security and WAN optimization solutions. Blue Coat offers solutions that provide the visibility, acceleration and security required to optimize and secure the flow of information to any user, on any network,
anywhere. This application intelligence enables enterprises to tightly align network investments with business requirements, speed decision making and secure business applications for long-term competitive advantage. Blue Coat also offers service
provider solutions for managed security and WAN optimization, as well as carrier-grade caching solutions to save on bandwidth and enhancethe end-user Web experience. For additional information, please visit www.bluecoat.com.
if !supportEmptyParas]> endif]>
# # #
if !supportEmptyParas]> endif]>
Blue Coat, WebPulse and the Blue Coat logo are registered trademarks or trademarks of Blue Coat Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document are the property of their
respective owners.
if !supportEmptyParas]> endif]>
For more information, please contact:
Manal Abi Rafeh
Blue Coat Systems ME
Telephone: +971 4 3911620
Fax: +971 4 3911635
Email: manal.abirafeh@Blue_Coat.com
Media Contact:
Colin Saldanha
PR Consultant
PROCRE8
Dubai - UAE
GSM: +971 (50) 6400762
Email: colin@procre8.biz
if !supportLineBreakNewLine]>
endif]>

### Attached Files

# | Filename | Size
--- | --- | ---
299675 | 299675_b85ed116b7a6713da07749e3d8119954f3f2c915-1.jpg | 2.8KiB