2008 Sophos Threat Report

The 2008 Sophos Threat Report is out, found here: http://www.sophos.com/sophos/docs/eng/marketing_material/sophos-security-report-08.pdf

A few highlights...

1. One new malicious Web page discovered every 14 seconds, or 6,000 a day
   
2. 4 out 5 of these pages are hacked, legitimate sites
3. 51.4% of malware-hosting sites are found in China, the new top country
4. More infected web sites are running Apache (48.7%) than IIS 6 (40.6%)
5. 1 in 909 emails contain malicious attachments, down from 1 in 44 in 2005
6. 50,000 variants of Storm Worm were recorded in 2007
7. 21 % of malware is written in China
8. Symantec detected just 66% of new malware in independent testing, a poor 5th best
9. The U.S. is still the top spam relaying country, with 22.5%
10. 95% of all email is spam

Lots more to digest, and the outlook is darker with each new report. But take heart, if you work in NetSec, it all adds up to: job security!