A quarter of companies experienced a web-based threat last year, but are still underestimating the risk from this vector, according to new research from security firm Webroot.

The vendor's latest State of Internet Security report found that one in four respondents globally suffered an attack that caused a server outage, compromised sensitive information or threatened online transactions.

The internet was also identified as a greater source of threats than the email channel, harbouring more viruses, worms and spyware, and leading to more security breaches and loss of customer information. According to Peter Watkins (Webroot), "Around 85 per cent of malware comes in via the web, and businesses have been slow to react to this".

The scale of web-based malware was further highlighted by figures from ScanSafe, which reported in its monthly Global Threat Report that more web-based malware was detected in October than in any other month this year. The research found that 65 per cent of malware blocks last month resulted from visits to compromised websites.

More alarming still, web-based malware coming from search engine results pages was higher than in previous months, at 9.3 per cent of all encounters, said ScanSafe.


Source: vnunet