2008-10-21 23:29:02 -

www.scansafe.com - ScanSafe Susie Bailey, +44 20 7959 0648 (Media) Mobile: +44 7875 360 437 susie.bailey@scansafe.com In its quarterly Global Threat Report issued today, ScanSafe, the pioneer and leading provider of SaaS Web Security, reported that companies in the Energy industry faced the greatest risk of Web-based malware exposure, at a 189% heightened risk compared to other verticals.

The Pharmaceutical and Chemicals industry faced the second highest risk of exposure at 181% followed by the Construction & Engineering industry at 144%. The Media and Publishing industry were also among those at highest risk, with a 93% heightened risk compared to other verticals.

"Given the global impact of the Energy & Oil sector, it is particularly troubling to see

that this sensitive sector is at the highest risk of Web-based malware," notes Mary Landesman, senior security researcher at ScanSafe. "And when one considers the top three most at risk sectors include Energy, Chemicals, and Engineering, one has to question whether these encounters are incidental or whether these particular sectors are under attack."

According to the latest ScanSafe Global Threat Report:

1. Volume of Malware Blocks Increases by 338%: The volume of malware blocks increased by 338% in the third quarter compared with the first quarter of this year. The highest number of malware blocks was recorded in July 2008. The high level of malware in the third quarter was largely driven by continued SQL injection attacks as well as increases in socially engineered malicious email.

2. Password Stealers and Backdoor Trojans Increase by 267%: The risk of backdoors and password stealing Trojans has also increased by 267% in September compared to January 2008 putting corporate data at risk.

3. 74% of Malware Blocks in Third Quarter Resulted from Visits to Compromised Websites: This poses a particular challenge to corporate users as these attacks tend to be delivered silently and are carried out through legitimate and often well known sites.

4. Gap Between Zero Day Web-Based Malware and Signature-Based Scanners Increases: September 2008 bore witness to the increased gap between zero day threats and signature-based scanners. 31% of malware blocks in September were zero day blocks meaning that they were not detected by signature-based scanners at the time of exposure.

"Although Web-based malware threats have continued to increase quarter over quarter, the levels did plateau in August and September 2008," comments Mary Landesman, senior security researcher at ScanSafe. "Despite the plateau, the level of malware throughout those months was at an all-time high compared to previous months, with the exception of July which had an unprecedented level of malware."

The ScanSafe Global Threat Report represents the world's largest security analysis of real-world corporate Web traffic and is based on an analysis of more than 20 billion Web requests the company processed per month for customers in over 80 countries.

For a copy of the latest monthly ScanSafe Global Threat Report, please visit www.scansafe.com/resources/global_threat_reports2/ gtr_2008/Q3_2008_GTR.pdf. (Due to its length, this URL may need to be copied/pasted into your Internet browser's address field. Remove the extra space if one exists.)

About ScanSafe

ScanSafe is the largest global provider of SaaS Web Security, ensuring a safe and productive Internet environment for businesses. ScanSafe solutions keep viruses and spyware off corporate networks and allow businesses to control and secure the use of the Web and instant messaging. As a fully managed service, ScanSafe's solutions require no hardware, upfront capital costs or maintenance and provide unparalleled real-time threat protection. Powered by its proactive, multilayered Outbreak Intelligence(TM) threat detection technology, ScanSafe processes more than 20 billion Web requests and 200 million blocks each month for customers in over 80 countries.

With offices in London and San Francisco, California, ScanSafe is privately owned and financed by Benchmark Capital and Scale Venture Partners. The company received the CNET Networks award for Security Product of the Year 2008, a 2007 CODiE award for Best Software as a Service Solution, the 2008 and 2007 SC Magazine Europe Award for Best Content Security Solution and was named one of Red Herring's Top 100 Technology companies. For more information, visit www.scansafe.com.

Leading Provider of SaaS Web Security Reports Volume of Malware
Blocks Has Increased Over 300%