4 ms·
https://www.google.com/transparencyreport/safebrowsing/malware/#region=ALL&period=90&size=LARGE&compromised&attack&asn=57010&page=1 https://www.google.com/trans
by thirsteh 13y ago
https://www.google.com/transparencyreport/safebrowsing/malware/#region=ALL&period=90&size=LARGE&compromised&attack&asn=57010&page=1 https://www.google.com/transparencyreport/safebrowsing/malwa...
See "Compromised sites" at the bottom.
In my experience, compromised sites and insecure ad networks are by far the most common means of distributing malware through legitimate sites.
Even if you know what you are doing, you are very likely to come across sites running e.g. Wordpress, Drupal, etc. with shitty addons, e.g. timthumb, that have been compromised and are serving exploits through hidden iframes, redirecting you to bad pages, etc.
- diminoten 13y agoWhat percentage of those exploits are 0day? Part of "knowing what you're doing" involves keeping your software up to date, after all. Commodity malware isn't a large threat if it can't run. Very cool link though, thanks.
- thirsteh 13y agoI don't know (presumably few to none if Google is detecting them), but yes, I agree. You can be exposed but not be vulnerable.