Global web threats go local

The annual Global Threat Report found that internet criminals are now concentrating on configuring their attacks to specific geographic locations and languages to achieve greater success rates.

Spam and phishing emails for example are increasingly being written so that they appear in the native language of the recipient, while malicious web sites serve up malware in a language determined by the country the target is located in.

Criminals are also looking to exploit popular local applications such as banking web sites, crafting software which can determine specifically which user details need to be intercepted to ensure a successful attack, according to Toralv Dirro, McAfee Avert Labs Security strategist.

The report also drew attention to the exploitation of the user-generated content on many so-called web 2.0 sites such as Wikipedia and MySpace, to embed malicious code in these web pages.

"For the operators of these sites it would be a good idea to automatically convert pictures from one format to another to remove some of the exploits," he explained. "And for enterprises, if you allow your users to visit these sites you should make sure you filter not just email but http traffic."