Has anyone else seen an increase in virus attacks through normal web browsing?

[chazzy2501]

I've noticed for the last couple of days that the pupils seem to be finding more and more websites that have viruses. Usually I'll get 2 or 3 hits a week, but in the last few days (Thur,Fri,Mon) I've seen 10 to 12 hits a day. I'm on the SWGFL and use NOD32.

[irsprint84]

Be from image searching

[Guest salan]

I would say that 90% of the attacks we see are from this. Yes a 10 fold increase.

Alan

[dhicks]

I've noticed for the last couple of days that the pupils seem to be finding more and more websites that have viruses.

 

Indeed:

 

Poisoned Google Image Searches Becoming a Problem - Slashdot

 

We noticed a few weeks ago, when I think someone released a virus into the wild that exploited a particular security issue to let the virus install its own code on otherwise legitimate websites:

 

http://www.edugeek.net/forums/security/73516-fake-virus-websites.html

[m25man]

We NEVER seem to get anything through our Sonicwall and Sophos setup, but in the last two weeks I have had two users (who both happen to have local power user rights to run some rubbish HR app) catch the Vista 2011 Fake AV Malware!

Our logs average around 500,000 attacks a month mostly from China and the Eastern Block so I guess 2 infections is a minor inconvinience but you cant afford to drop your guard.

[chazzy2501]

My filtering kind of messes google image search up anyway! I can't attribute the attacks to any 1 domain. They all come in the form of a JS virus, from a well rounded collection of urls. What I would say is that they seem to be adverts in legit pages.

 

I use WSUS with critical patches auto install and upto date NOD32 V4 on all clients but how many attacks can the network take until a vunrability is found? I know once a virus has a foothold in the local network is more of a problem. I've seen conficker on a primary school, it broke the domain controller! (not on purpose, the DC just couldn't handle the traffc load put on it for a week)

[gshaw]

It seems like there's a new wave of fake AV web code that's been released in the last week or two. Thought we'd seen the last of them but there's been 3-4 cases of it now in the last week or so...

[Michael]

The irony is that Google does warn users of websites that contain malicious code, but they're so busy doing this that they've forgotten about their own websites...