FYI...

- http://www.theregister.com/2007/05/1...e_malware_map/
11 May 2007 ~ "At least one in 10 web pages are booby-trapped with malware, according to Google. A five-strong Google research team found that 450,000 pages, out of a sample of 4.5 million pages, contained scripts to install malicious code, such as Trojans and spyware on vulnerable PCs, the BBC reports*. This is a conservative estimate - another 700,000 pages given the once-over were thought to be suspicious by Google. Google's Ghost in the Browser study (PDF**) covers the well-understood problem of drive-by-downloads from compromised sites, which are eclipsing virus-infected email as a means to spread malware... Tricks include hacking into a web server to plant malware, or planting it within third-party widgets or advertising. User-generated content also creates a means to upload malware. The researchers hope to use their findings to "map" the problem and aid the development of a new generation of safe surfing tools that steer users away from harm."

* http://news.bbc.co.uk/2/hi/technology/6645895.stm

** http://www.usenix.org/events/hotbots...vos/provos.pdf