China Becoming World's Malware Factory
Why China is the Malware Factory to the World
A Layman's Glossary of Malware Terms

Beijing-based KnownSec gathered the viruses and other information with a crawler that scans nearly 2 million Chinese Web sites each day, Zhao Wei, CEO of the security company, said in an interview in Beijing. He planned to give a presentation on the subject at the Forum of Incident Response and Security Teams (FIRST) security conference in Kyoto, Japan this week.

The database covers more Chinese Web sites and provides more up-to-date information about their security than any other, Zhao said in the interview. China produces the majority of the world's malware, he said.

A history for each site in the database lists dates of malware infection, the strings of malicious code placed on the sites and which antivirus products defend viewers against their attacks. The database also stores tens of thousands of viruses found being distributed by the sites.

KnownSec each day finds more than 100 Trojan downloader files that have never been seen before, Zhao said. Each of those can direct a victim's PC to download up to ten viruses.

The database also has a list of Web sites that are currently compromised. Only about half of the newly infected sites KnownSec finds each day are also listed by Google as dangerous, said Zhao.

Google labels search results it has found to be potentially dangerous during scans of its index. When asked for comment, a Google spokeswoman said organizations need to work together to identify online threats and stamp them out.

Security companies and national computer emergency response teams can request access to the KnownSec database, Zhao said. Security companies could use the information to shield users of their antivirus programs against new malware threats, he said.

"We cannot realize the role of this data by just keeping it," Zhao said.

Separately, security vendor McAfee has seen a rise in malware from China in recent months, Prabhat Singh, McAfee's senior director of Avert operations in the Asia Pacific, said in an interview.

The amount of malware Chinese Internet users reported to McAfee in the last six months was nearly 80 percent the amount reported in all of 2008, Singh said. At that growth rate, the amount of malware seen in China this year could double over last year, he said.