IE10 Blocks More Malware than Chrome, Firefox, Safari and Opera

Quote:

---

Originally Posted by Niclo Iste

I'll side with experience.

---

NSS Labs' "2013 Browser Security Comparative Analysis: Socially Engineered Malware" was authored by:

Quote:

---

• Randy Abrams - Research Director Randy Abrams brings a wealth of experience in malware and virus research to the NSS Labs team. Previously, he was the Director of Technical Education for six years at ESET, a global antivirus company, and from 1993 to 2005, worked at Microsoft where he developed and managed the processes to prevent their software from being released with malware.
  
  Abrams has presented at dozens of international security conferences, is often quoted in articles for several security publications, and has served on the board of directors for the Association of Antivirus Asia Researchers since 2000.
  
  
• Orlando Barrera II - Orlando Barrera II leads the Malware and Phishing Research team. Previously, he worked in communications with the United States Army Signal Corps, 35th Signal Brigade, stationed at Fort Bragg, N.C. While completing his Bachelor of Science degree, he worked in the Computer Science department at Texas State University.
  
  He also previously worked for SecTheory as a code monkey, software developer, and security researcher. Barrera has presented at B-Sides LV, RSS, LASCON, HouSecCon, AHA and is an active member in the local OWASP chapter. His vulnerabilities and exploits published include: CVE-2009-3371, CVE-2010-0160, and CVE-2010-4109.
  
  
• Jayendra Pathak - Jayendra Pathak leads the Live Testing team and brings a wealth of expertise in malware, phishing and exploit analysis. Pathak and team maintain a comprehensive database of threats prevalent in the wild and built an automated live testing infrastructure that runs with minimal supervision. Along with NSS Labs Researcher Mohamed Saher, he also built an exploit-hunting tool -- BaitNET -- which gathers real-time intelligence on these exploits.
  
  Prior to NSS Labs, he was a research assistant at University of Houston where he was pursuing his M.S degree. A native of Nepal, Pathak worked as a computer engineer for the Government of Nepal for 4 years prior to coming to United States.
  
  A true researcher, Pathak's hobby is to scan the internet for the threats and try to correlate how those threats affect users. He has a B.E. in computer engineering from Nepal Engineering College and a M.S. in Management Information System from University of Houston.

---

Sadly what used to be true, that people with really good web habits were unlikely to be infected
is no longer the case.
Because of the move to infect legit pages, it has left all in jeopardy. I just went through a huge
hassle with one of my IT clients and their web page. It has been infected on and off for a year.
I finally had to call the web hosts main tech support and ask if they were aware their
servers were serving up a black hole exploit kit. This from a golf webpage. The crooks know
infecting legit webpages is the way to go now.Not enough money in the fools surfing the pr0n page.

Of course, ionamartin123 has asked a similar question over in this thread, so I think I've already said enough about reputation based blocking.

Hacked websites account for a very high percentage of malware distributed online, and of course there are plenty of sites eager for advertising, and unwilling to screen the ads for malware or links to malicious sites. Nevertheless, plenty of people still get infected by going right to the source, and SmartScreen just doesn't cut the mustard when it comes to prevention.

And, SpywareDr, regardless of the credentials of the staff at NSS labs, cooking a largely bogus and sensational set of test results still makes them a s##thook company. It's just Twenty First Century snake oil.

Like I said ... :)