|
| ||
| Home | Antiviruses | Articles | Anti-spam | Forum | Test | Buy |
November 2004Top Ten viruses most frequently detected by Panda ActiveScan in October -- Posted by Igor_Donchenko on Tuesday, November 2 2004
The following conclusions can be drawn from the data collected by Panda ActiveScan in October: - The number of incidents caused by computer worms has increased. Unlike previous months, in which the number of Trojans detected was higher than the number of worms, last month a similar number of these different types of malicious code was detected. However, bear in mind that all the worms on this list have Trojan functions. This confirms that there is a large amount of criminal activity in the Internet, as Trojans are often used by cyber criminals to commit fraud, above all, financial fraud. - Financial gain: the main motivation for creating malware. Several of the Trojans in the October Top Ten are designed to install other malware, like spyware or adware, on affected computers. This once again demonstrates that it is activity with financial gain that is motivating the creators of Internet threats, selling data on users’ browsing habits, for example, can earn substantial profits. - Many users are not correctly applying the patches to fix vulnerabilities in the software installed. The presence of Netsky.P, which exploits a known vulnerability that was fixed three month ago, is proof of this. Similarly, the Sasser worms are still around, which also exploit a security flaw in Windows to infect computers directly via the Internet. Source: http://www.pandasoftware.com
The Virus Top Twenty for October 2004 from Kaspersky Labs -- Posted by Igor_Donchenko on Tuesday, November 2 2004
October, like September, saw further new variants of Mydoom and Bagle. Mydoom.ab (Swash.a) and Bagle.at appeared within a few days of each other. In fact, Bagle.at was followed immediately by a clone: Bagle.au, thought the clone did not make the Top Twenty. The Bagle mass mailing, October 29, was so effective that it took Bagle.at only 3 days to reach seventh place in the Top Twenty. On the other hand, the high ranking was achieved in the first day: the numbers have fallen in the past two days and Bagle.at may well not rank so high in November. A new version of the Hungarian I-Worm.Zafi.c was detected in the interim between Mydoom.ab and Bagle.at. This third variant has not been seen in the wild yet, though an outbreak is highly probable if we remember how long the previous variant was in the Top Twenty. In all other respects, the October Top Twenty is almost identical to the September Top Twenty. NetSky variants are on top, with Bagle and Mydoom variants continuing their fruitless efforts to outrank them. Bagle.as has moved noticeably: 8 slots in one month. Zafi.b continues falling - 5 places and a high probability of leaving the Top Twenty by November. If this occurs, LovGate.w will be the only malicious program on the list that is no a member of the Big Three. TrojanDownloader.JS.Gen and TrojanDropper.VBS.Zerolin have already left the rankings, despite a number of mass mailings containing these programs. However, other malicious programs proved more active and pushed these Trojans out of the Top Twenty. However, other malicious programs continue to challenge the Big Three - Backdoor.Win32.Rbot.gen returned to the ratings this month. This backdoor, a hard-hitting bot, is controlled via IRC channels: it normally spreads by exploiting various vulnerabilities in Windows (RPC DCOM, LSASS and so forth). This month, virus writers seem to have decided that SP2 for Windows XP created too many barriers: they chose to send Rbot via email instead, and successfully as statistics demonstrated. Sadly, we cannot look forward to life without Bagle and Mydoom yet. The source codes of both worms have been widely publicized on the Internet and spread by the worms themselves. Most of the virus activity we have witnessed recently has been caused by variants of these two worms, or, to be precise, recompiled versions of the published source code. Other malware made up a significant proportion of Internet traffic this month: we detected over 200 different malicious programs. Summary: New viruses: Bagle.at, Mydoom.ab Moved up: NetSky.b, Bagle.as, Bagle.z Moved down: Mydoom.m, Zafi.b, NetSky.d, NetSky.y, LovGate.w, NetSky.r, NetSky.c No change: NetSky.q, NetSky.aa, NetSky.t, Mydoom.l, Bagle.gen, Bagle.ah Re-entry: Mydoom.r, Rbot.gen Source: http://www.kaspersky.com
Exploit.HTML.Objdata -- Posted by Igor_Donchenko on Monday, November 1 2004 <objectdata="http:/Decryption of above: http://www.fatbonuscasino.com/page.php Once users connect to this site a chain of Trojans hits:
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Virus and security arcticles
 
|
|
© AntivirusWorld.com |