Risk
11/30/2009
04:59 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Bit.ly, Sophos Partner For Malware Protection

Goal is to protect users against visiting Web pages that may contain a malware, spam or phishing threat

BOSTON " November 30, 2009 " IT security and data protection firm Sophos today announced that it has entered into an agreement with bit.ly, the world's most popular utility used to shorten, share, and track links, to assist them in protecting users against visiting webpages that may contain a malware, spam or phishing threat.

According to SophosLabs, 23,500 new infected webpages are discovered every day " four times worse than in 2007. Organizations have become increasingly concerned about the rise in malicious attacks taking place via social networking sites, as well as the risks of users revealing sensitive personal or corporate data online. See recent Sophos survey.

More than a third of social networking users report that they have been spammed via social networking sites, and more than 20 percent report that they have been the target of malware " with cybercriminals often using shortened links to disguise their attacks. View poll graphs.

"bit.ly is committed to protecting its users from spam and malware," says Andrew Cohen, general manager at bit.ly. "Services like Sophos are an important part of building trust."

bit.ly currently filters all links through several independent services to check for spam, suspected phishing scams, malware, and other objectionable content. It also enables users to preview any page by adding a "+" to the end of a bit.ly URL. Given the rapidly growing use of bit.ly on the web, and specifically on micro-blogging sites such as Facebook, Twitter, CNN, twitterfeed, there is a danger that cybercriminals could try to exploit bit.ly links in order to infect users.

bit.ly has partnered with Sophos to provide:

* Unparalleled visibility of infected websites through Sophos's combination of virus/malicious behavior detection, search engine partnerships and anti-spam honeypots, which constantly trawl the web and scan email traffic to find newly infected sites and trace them back to the malicious hosting sites.

* Behavioral scanning of the content of webpages to dynamically identify new malware; keeping Sophos one step ahead of the malware authors and their attempts to get past traditional anti-virus software by constantly modifying their malicious code.

"Web 2.0 sites allow users and communities to share links with each other faster and with greater flexibility than ever before " but hackers can also take advantage of the rapid exchange of information to spread malware and phishing threats," said Rainer Gawlick, Chief Marketing Officer at Sophos. "bit.ly is showing it is a responsible member of the internet community by looking to Sophos and other security specialists to better protect its huge user base."

About bit.ly

bit.ly is one of the largest sharing platforms on the web. bit.ly is an URL shortening, web analytics service that allows users to shorten, share and track links. It can be accessed through the bit.ly website, bookmarklets, or through an open API. By creating unique user-level and aggregate links on bit.ly, users are able to view real-time traffic, analyze location and referrer data, as well as track statistics and trends.

About Sophos

More than 100 million users in 150 countries rely on Sophos as the best protection against complex threats and data loss. Sophos is committed to providing security and data protection solutions that are simple to manage, deploy and use and that deliver the industry's lowest total cost of ownership. Sophos offers award-winning encryption, endpoint security, web, email, and network access control solutions backed by SophosLabs " a global network of threat intelligence centers. With more than two decades of experience, Sophos is regarded as a leader in security and data protection by top analyst firms and has received many industry awards.

Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-2413
Published: 2014-10-20
Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php.

CVE-2012-5244
Published: 2014-10-20
Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) return, (2) display, (3) table, or (4) search parameter to functions/suggest.php; (5) the id parameter to functions/widgets.php, (6) the category parameter to...

CVE-2012-5694
Published: 2014-10-20
Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo, (3) agentURLPath, (4) agentControlKey, or (5) platformDD1 parameter to frameworkgui/attach2Agents.p...

CVE-2012-5695
Published: 2014-10-20
Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL injection attacks or (3) send an SMS m...

CVE-2012-5696
Published: 2014-10-20
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.