ScanSafe issued its Annual Global Threat Report based on an analysis of more than 240 billion Web requests processed in 2008 by the ScanSafe Threat Center from corporate customers in more than 80 countries. It represents the world’s largest security analysis of real-time traffic.

The report reveals that there has been an explosive growth in malware throughout 2008. ScanSafe noted that there has been an overwhelming 582% growth between like quarters in 2007 and 2008 and a 300% volume ratio increase from January 2008 through December 2008. Exploits and iframes were up 1731% in 2008, while data-theft Trojans increased 1559%.

The Web is now a massive front for data harvesting

Cyber criminals in 2008 have shown a change of intent and are now focused on the ongoing targeting and harvesting of sensitive data. Most of the malware delivered through the Web provides remote customization and configurability, enabling criminal attackers to target specific data and to remotely manage how that data is obtained. For home users, gaming credentials or credit card numbers could be at risk. For enterprises, there is the possibility of intellectual property theft and the potential to eavesdrop on all network transmissions via ARP poisoning or other man-in-the-middle attacks.

The credit crunch is fueling data theft

In 2008, 14% of all ScanSafe Web malware blocks were the result of encounters with data theft Trojans, compared to 6% in 2007. Towards the end of the year when the credit crunch was in full swing, we saw the largest growth in this category of threats. Not only did October and November 2008 show the highest levels of Web malware blocks but they also showed a heavy saturation of data theft Trojans.

Trusted sites pose the greatest risk

In April 2008 ScanSafe counted an excess of 780,000 malicious Web pages from only five vertical interest sectors as a result of a single SQL injection attack. As a result of the continuing mass compromise of legitimate websites observed throughout 2008, the standard ‘safe surfing’ advice of avoiding unknown or non-trusted websites no longer applies. Today, it is the trusted sites that should be viewed as posing the greatest risk to Web surfers.

Energy & Oil sector has 400% elevated exposure to data theft Trojans

ScanSafe discovered that the top five most at risk verticals were Energy & Oil, Pharmaceutical & Chemical, Engineering & Construction, Transportation & Shipping, and the Travel & Entertainment industry. The average number of unique new variants of data theft Trojans encountered by customers in the first three quarters of 2008 was 57. The Energy & Oil sector encountered 213, an elevated exposure of nearly 400%. For those in the Engineering & Construction industry, the unique variant count was 166, nearly 300% greater than the average.