Interesting idea/program BLADE

[fredvries]

A government funded research group is preparing to release a new free tool designed to block “drive-by downloads,” attacks in which the mere act of visiting a hacked or malicious Web site results in the installation of an unwanted program, usually without the visitor’s consent or knowledge.

 

The as yet unreleased software is called “BLADE,” (short for Block All Drive-By Download Exploits).

 

More info here.

[evilfantasy]

Brian Krebs had a good blog post on this today. BLADE: Hacking Away at Drive-By Downloads

[enoskype]

Update the BOLD programs to their latest versions.

 

Great articles, thanks to both of you guys. :smile:

 

Not a surprize to see the names of the unpatched (unupdated) softwares which are the most vulnarable ones.

 

A great advise to community will be the suggestion to update those concerned softwares as soon as possible to the latest versions.

 

I don't see any harm to put them in the order of starting from the most attacked ones according to BLADE's evaluation lab.

 

Adobe Reader

Sun Java

Internet Explorer

Adobe Flash

 

 

The research concerns the attacks in which the mere act of visiting a hacked or malicious Web site results in the installation of an unwanted program, usually without the visitor’s consent or knowledge.

 

And now comes the most misarable, sad part, only ~27-28% for each malicious binary delivered by the exploit sites is detected by the A/V softwares which are in VirusTotal.

 

 

Cheers.