Summit2008/Sessions/Proposals/Malware Trends

chofmann, Dan Vedtiz, Tenser

keeping an eye on malware trends

• case studies on recent reports and how we might be attacked.
  • installer spoofing
  • adware confusion
  • blog sites where owner didn't know about malware infection
  • http://www.0x000000.com/?i=615 - hidding malware in extension profiles
    • https://bugzilla.mozilla.org/show_bug.cgi?id=219180 rights system for addons

• metrics.
  • how do we measure and track the overall frequency of reports and hot spots of malware reports affecting firefox users.
  • SUMO page hits for malware related articles. sharing some recent data?
  • stopbadware.org hits
  • webmaster reports

• developing a community of people that can follow up to investigate reports of malware affecting firefox users. current sources are SUMO, webmaster@mozilla.*, bugzilla.

• partnerships
  • http://stopbadware.org
  • scanning vendors?

• How to improve response systems and advice.
  • SUMO articles?
  • other ideas?

• more preventative measures
  • need to block exploitable plugins and upgrade users to new fixed versions
    • add key bug links here.