Dec29 |
5:00 am (UTC-7) | by
Martin Roesler (Director for Threat Research) |

As 2010 comes to a close, here’s a list of the riskiest items we encountered in the past year:
- Hardware: The riskiest hardware device used in 2010 was the German identification card reader. These cards contain encoded private information such as fingerprints. Unfortunately, the information on them can be quite easily stolen by using certain card readers.
- Website software: The riskiest software used by websites in 2010 was the popular blogging platform WordPress. Tens of thousands of unpatched WordPress blogs were used by cybercriminals for various schemes, primarily as part of redirection chains that led to various malware attacks or other blackhat search engine optimization (SEO)-related schemes.
- IP: The most dangerous IP used in 2010 was Internet Relay Chat (IRC). Thirty percent of all botnets used IRC to communicate with infected machines and their command-and-control (C&C) servers. Fortunately, blocking IRC use in networks reliably stops botnets.
- OS: The riskiest OS used was Apple’s Mac OS X. In November, Apple sent users a massive maintenance release that weighed in at at least 644.48MB. The weighty upgrade included fixes for multiple security vulnerabilities since the previous update released in mid-June. Apple’s penchant for secrecy and longer patch cycles also increased the risk for users.
- Website: The most dangerous website in the world was Google. Its tremendous popularity led cybercriminals to target it specifically for blackhat SEO-related schemes, which in turn, led users to significant malware threats, particularly FAKEAV. In addition, Google’s ad network was also frequently victimized by malvertisements.
- Social network: In another case wherein popularity led to danger, Facebook could be considered the most dangerous social networking site around. Everything from survey scams to KOOBFACE malware proliferation ensued on the site, as cybercriminals went where the people were, that is, Facebook.
- Top-level domain: The most dangerous top-level domain in the world was CO.CC, which allowed cybercriminals to register thousands of domains on the fly with very little in the way of verification. This, along with Russian ISPs that routinely refused to shut down malicious sites, made for a very dangerous combination.
- File format: PDF was the riskiest file format in 2010, as Adobe Acrobat and Reader vulnerabilities routinely became part of exploit toolkits.
- Runtime environment: The most dangerous runtime environment for users in 2010 was Internet Explorer (IE) with scripting enabled. Even today, most browser exploits specifically target IE. However, Java is quickly becoming a more prominent target and could become the prime target in 2011.
- Infection channel: The most common infection channel was still the browser, as more than two-thirds of all infections used this as infection vector. Previous infection methods like flash disks and spammed messages were still around but were less prominent than before.
Share this article |
|





Pingback: WordPress Blog Claims WordPress Is The Riskiest Web Software? | Chrome9
Pingback: Social Media Marketing HQ | Learn Social Media From the Industry's Brightest Minds » WordPress Blog Claims WordPress Is The Riskiest Web Software?
Pingback: عَ سريع » جوجل والوردبريس والفيس بوك في قائمة “الأكثر خطورة” لعام 2010
Pingback: The Most Dangerous Tech Items Of 2010 | PCMech
Pingback: Top 10 des technos à risques en 2010 | 1 jour 1 post
Pingback: Listado de las amenazas más peligrosas durante 2010 » blog.trendmicro.es
Pingback: جوجل والوردبريس والفيسبوك في قائمة الأكثر خطورة لعام 2010
Pingback: Top 10 des technos à risques en 2010
Pingback: Trend Micro Asia Pacific Newsletters Library - 2010 in Review: 2010′s Most Dangerous List
Pingback: Google é apontado como um dos sites mais perigosos de 2010 | F2 - Sistemas
Pingback: Lo peor del 2010 | JuandaBIT
Pingback: Google é um dos sites mais perigosos de 2010 | F2 - Sistemas
Pingback: Colobe IT Solution-Leonardo » Blog Archive » Google é um dos sites mais perigosos de 2010
Pingback: Mac OS X は危ない OS « やっぱりマックでしょ!
Pingback: Google tops list of web’s most dangerous « new media monthly
Pingback: BuddeBlog » Blog Archive » ICT’s dangerous items listBuddeBlog
Pingback: Google foi o site mais perigoso de 2010
Pingback: WordPress As Riskiest Web Software In 2010 « Weblog Tools Collection
Pingback: 2010 in Review: 2010′s Most Dangerous List | Threat Trend Security News
Pingback: Mac OS X crowned most dangerous OS in 2010 – DRS | Derangedshaman.com
Pingback: Najopasniji Mac OS X | BalkanCafe
Pingback: Najopasniji operativni sistem Mac OS X | Republika
Pingback: Google и WordPress са най-опасните сайтове в света за 2010 г. | NewTrend.bg
Pingback: Is OS X Dangerous For Users?
Pingback: What were the greatest risks online in 2010? | ListFree.org
Pingback: What were the greatest risks online in 2010? | We Watch Your Website - so you don't have to!
Pingback: Google was the world’s most dangerous website in 2010 | roboword
Pingback: جوجل من أخطر المواقع سنة 2010 | عالم جوجل
Pingback: ‘Site Google Gevaarlijkste site ter Wereld’ |
Pingback: The Most Dangerous OS: Mac OS X | ConceivablyTech
Pingback: Google was the world’s most dangerous website in 2010
Pingback: Google was world’s most dangerous website in 2010
Pingback: [EN] Hardware, aplicaciones y servicios más vulnerables del 2010