Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'd like to test an application that detects malware on my network. In order to do that, I have a Windows VM set up that I'd like to infect with malware. But for the life of me, I can't seem to find an actual example of a website with malware in the wild.

To be clear -- what I'm looking for is a website that, when I navigate to it in my VM's web browser (any browser, I'm not picky), automatically installs malware (ideally invisibly) to the virtual disk. I realize that this probably requires an earlier patch of some plugin or software (e.g. Silverlight 4 or IE 8 or something) -- I don't mind this requirement.

Any suggestions on where to look for such a beast?

share|improve this question

2 Answers 2

I guess I should preface this first with: Please, please be careful.

A few sites you might check for indexing are:

  • hxxp://www.blade-defender.org/eval-lab/
  • hxxp://www.malware.lu/
  • hxxp://www.offensivecomputing.net/
  • hxxp://www.phishtank.com/
share|improve this answer

Here's a list of websites that maintain and provide a list of malicious sources: http://www.selectrealsecurity.com/public-block-lists

I hope this helps you.

Brian

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.