Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Trojans Lurking In Fake Video Postings On YouTube: Page 2 of 3

And, like YouTube, many, if not most, of these infected Web sites are not malicious by original intention. Either criminals hack in and embed the malicious code, or they're Web 2.0 sites that allow users to post their own content. This means that bad guys, as well as well-meaning users, can post to the sites, and sometimes that includes malware or links to other infected sites.

Researchers at security company Sophos noted that the percentage of infected e-mail has dropped from 1.3%, or one in 77 e-mails in the first three months of 2006, to one in 256, or just 0.4% in this year's first quarter. In the same time period, Sophos identified an average of 5,000 new infected Web pages every day. However, this month, Sophos has greatly upped that number to 9,500 new infected Web pages every day.

However, Henry said it should be fairly easy for IT managers to protect their corporate users from these malicious Web sites.

Companies normally only filter Web traffic destined for their internal Web filters. However, when a user visits a Web site, that site pushes html code back at the user's machine. IT managers need to configure filters to scan that return traffic.

"People have not been inspecting that traffic," said Henry. "It's been a blind spot within most enterprise architectures. It's crucial today to inspect traffic bi-directionally. It's not all that hard to do."