“In addition to blanket work, hackers will be ordered by the buyer to accept some ‘private activities’ such as invasion of the school site back end to obtain the name, graduate school, telephone number, home address information. Some engineer said:” Now these information has become a popular selling. Type “candidates information” in Baidu, and you will see the first search results “Examinees information sale’, while the sale of candidate information pages are up to hundreds.”

Note: June 24, some of the hacked college entrance exams related web pages:

　 1, East China Normal University
　　hxxp://www.ecnu.edu.cn/new_gonggao/img2/type.asp?typeid=20

　　2, Tsinghua University, college of Aerospace
　 hxxp://hy.tsinghua.edu.cn/index.asp

　　3, School of Xidian University
　 hxxp://lxy.xidian.edu.cn/zhuanjiajiaoshou/gedebiao/

　　4, Huazhong University of Science, School of Economics

　　5, haoyuding.com
hxxp://haoyuding.com/html/xinwenzixun/qitazonghe/2010/0414 /3995.html

　　6, The Teacher Resource Station
　　hxxp://www.ziyuanzhan.com/fudao/zkxx/gaokao/Index.html

Rising believes that large-scale Web site, browsers, and popular software has become the targets of hackers. In the first quarter there were 24,202 large-scale sites trojaned, it has become one of the most important security threat factors to the Internet in China. Rising reminded Internet users not to believe the Internet “secure browser” “as long as it is based on the IE core, it will be exploited by hackers.”

CN domain name web sites have become the places with most Trojans.

Rising pointed out that hackers Trojaned large sites which makes an upward trend in the number of Internet users for a single attack Trojan site, according to statistics, the top two Trojans websites in the first quarter are gg6781.cn and sb3589.cn, These two sites attacked more than 860,000 Internet users. According to the statistics of the types of Trojan domain, CN domain is the most popular place for hackers to Trojan. In the first quarter, 85.5 percent Trojan sites have used the CN domain name.

According to Rising, “clouds security” system of statistical data, Beijing, Guangdong, Zhejiang three provinces have the largest number of malicious sites, of which 34% of the Trojan sites servers are located in Beijing. Guangdong, Beijing, Hunan has the largest population of net users, so they are most seriously affected by the Trojan.

To remind users not to believe “secure browser”

Rising statistical analysis pointed out that the browser has become the main channel for Trojan to penetrate computer users, including some known as “secure browser” products, as long as it is based on the IE core, it will be exploited by hackers, but these companies’ so-called “secure Anti-Trojan browser”false propaganda, further seriously mislead Internet users to reduce the safety measures brought about a huge security risk.

Rising security experts said that, technically speaking, the so-called “secure browser” does not exist, users should install mainstream security software with “anti-Trojan” function to avoid being invaded.

According to security experts from Rising, this security statistics report for the first time count the “Trojan site longevity” which means the Trojan site survival time on the Internet. Traditionally, people think that “the longer the existence of the Trojan site, the more fierce it is” In fact, according to statistics, of the top ten Trojan sites in the first quarter, the longest life expectancy is 5 days, the shortest is 1 day only. Hacker Group has a strong ability to Trojan, they can implantate in a day Trojan website URL to a number of sites, Internet users will be penetrated when visit these sites.
　　
“Rising security report” pointed out that the current various popular websites, client software and browsers, have many security loopholes and weak points, enabling users of the channels for increased attacks; with “hackers – the virus” industry rounded development chain, those supporting the development of a variety of Internet business models have been Trojanend, Trojan’s clicks attack decreased users’ confidence to the security of online shopping, online payment and online games. Moreover, since the majority of run-time Trojan has no obvious abnormal features, It is very difficult for users to discover their own poisoning.