cr0sh
Member
Now the following is pretty much my take but if I were wanting to write malicious software to attack an operating system or penetrate an operating system I would target Microsoft. Why? Not because Microsoft is more vulnerable to attack or easier to attack but because I want to make a big splash in the pond. People who write malicious software do it mostly because they can and want to call attention to themselves. Why write software to attack a system most aren't using? Go for the gold! Don't screw with Linux or even Apple for that matter, go big! Linux and Apple can be compromised but I get a little drip ripple in the pond, I want a splash, a big splash! Thus I attack the Evil Empire.
Well, you're kinda right. Its not so much about making a "big splash" in regards to "calling attention to themselves" (though I am sure that is a part of it). Its more because the installed base is larger, and thus you have more computers compromised for your (or your organization's) purpose (read as: botnet), and that's directly related to money. So you want the number of computers infected to be as large as possible, and right now that is on Microsoft's software.
Interestingly, even though the base of Linux installs and Mac OS (ie, BSD) is rather larger, you don't see many (any?) viruses floating around. While only anecdotal, it does say something for the security of *nix vs that of Microsoft's OS; if the base of *nix grows larger, we may see something different, but there really hasn't been any real big virus scares on *nix since the Morris worm way back in the olden days. The few "proof of concept" viruses done under *nix typically required the user to first login/su to root, then run the code. Which is really a lot of the issue behind Microsoft's trouble - everything wants (and sometimes needs) root access to do anything (supposedly XP, then Vista, then 7 - ad nauseum - was supposed to plug this hole - I'll guess we'll see with 7, but I'm not holding my breath).
Finally - another thing which I am not sure you have noticed or not, but when there is a big virus/worm/exploit on the net, have you noticed how almost none of the media organizations every mention anything about it being a Microsoft Windows based attack? I mean, if a particular brand of automobile was dying constantly, or blowing up, or had something else happen to it to everyone, the media would be all over it like flies. Microsoft Windows has problems? No a big deal - just call it an "internet" or "computer" virus, and don't mention what brand of software it fouls up...
One would think people would get the hint (some would say some have, given the number of people flocking to Apple, I suppose)...