Top 5 Web-hosts For Malware Identified

FYI…

- http://www.networkworld.com/news/2007/0504…eb-hosting.html
05/04/07 ~ "StopBadware.org on Friday identified five Web-hosting companies with myriad infected Web sites residing on their servers, which the industry watchguard says puts unwitting Internet users at risk. Based on analysis of close to 50,000 sites, the group identified five companies as hosting a majority of those Web sites known to distribute malicious code. The hosting companies –
iPowerWeb, Layered Technologies, ThePlanet.com Internet Services, Internap Network Services and CHINANET Guangdong province network
– have the largest number of infected Web sites residing on their servers. IPowerWeb was identified to have some 10,834 infected sites on its servers…"

More detail:

- http://stopbadware.org/home/pr_050307
5/3/2007
"…StopBadware.org analyzed 49,296 sites - sites submitted by trusted third parties to the StopBadware.org Badware Website Clearinghouse - and identified the following web hosting companies with the largest number of infected sites residing on their servers:
* iPowerWeb, Inc., (10,834)
* Layered Technologies, (2,513)
* ThePlanet.com Internet Services, Inc, (2,056)
* Internap Network Services, (1,437)
* CHINANET Guangdong province network, (786)
…Examples of attacks that can render a seemingly harmless website into a badware distributor include:
* Exploiting a known vulnerability in an older version of cpanel software to gain administrative access to sites hosted on servers managed with cpanel.
* Exploiting a known vulnerability in an unpatched content management system to inject lines of code via sql queries that load exploits in otherwise legitimate websites.
* Guessing weak passwords to inject lines of code that load exploits in otherwise legitimate websites…"