[LINK] Microsoft anti-piracy measures are causing malware distribution

[Kim Holburn]

Interesting article in eweek:
<http://www.eweek.com/article2/0,1759,2179725,00.asp>

Basically says most malware is coming from Chinese servers because  
they are running pirated software and Microsoft is not allowing  
updates any more so they are not patched.

> "Although a worrying number of Chinese-based Web pages are being  
> found containing malicious code designed to infect Web surfers  
> worldwide, it does not necessarily mean that the criminals behind  
> these attacks are based in the country," Graham Cluley, a senior  
> technology consultant at Sophos, said in a release. "Cyber-crime is  
> a truly global problem and all businesses must ensure they are  
> properly protected."
>
> As for why China's servers are such accommodating hosts, Sophos  
> credits the widespread rate of Mal/Iframe infections on Chinese  
> hosted sites, with more than 80 percent of the country's  
> compromised Web pages being stricken with the malware.
>
> Google also recently came out with some interesting related news  
> regarding what flavor of server malware senders like to use (or  
> exploit and then use) and why software piracy puts China at the  
> head of the malware game.
>
> In its June report, Google cited piracy statistics from  
> NationMaster that estimate piracy rate (the number of pirated  
> software units divided by the total number of units put into use)  
> at 92 percent in China in 2004, and from BSA, which put the figure  
> at 55 percent for 2006.
>
> Google also suggested that security patches aren't available for  
> such pirated copies of Microsoft IIS, meaning that a larger  
> percentage of Chinese IIS servers are potentially compromised.



--
Kim Holburn
IT Network & Security Consultant
Ph: +39 06 855 4294  M: +39 3494957443
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request

Democracy imposed from without is the severest form of tyranny.
                           -- Lloyd Biggle, Jr. Analog, Apr 1961