June malware report - something's phishy
Summary
Topics
The threat management vendor released on Monday its latest monthly report, which highlighted the current reign of Trojan horses and "disappointing" anti-spam campaigns.
Of the overall 108 newly-reported vulnerabilities in June, 62 were active exploits, indicating an "all-time high" of 57.4 percent, Fortinet said.
Fortinet said the majority of overall activity came from the United States, which contributed 22 percent of all reported exploits.
A significant proportion of the attacks were traced back to Asia--specifically, Singapore, Japan and Korea, which ranked second, third and fourth place, respectively. Some 13.57 percent of all attacks originated in Singapore.
Online games sites hosted the most number of Trojans, followed by Zbot variants W32/Zbot.M and W32/Zbot.V, which climbed to second and third place, respectively. The Zbot malware spreads keylogging and data-siphoning Trojans through e-cards sent via e-mail, directing users to malicious sites.
Another commonly used malware redirecting visitors to infected sites was the JS/PackRedir.A, which moved up 36 positions on the list to fifth position, said Fortinet.
In a separate release Monday, antivirus company Symantec released an alert warning of another Trojan, Infostealer.Bancos, which attempts to steal passwords after by enticing users to click on infected PDF files. Infostealer.Bancos has most recently been seen in PDF files sent via e-mail messages that purport to reveal Elvis Presley's whereabouts, said Symantec.
Efforts in vainAccording to Fortinet's report, spam levels remain unchanged in spite of efforts to take down spam-spreading network, 3FN/Pricewert.
Derek Manky, Fortinet's project manager of cybersecurity and threat research, said in the report: "There were some very noteworthy trends that surfaced in the June report, such as the growing popularity of Web-borne malware, which we see driving the next generation of threats to online services.
"Hackers continue to attempt to drive mass traffic to their threats, utilizing various tactics aided by large online communities and as a result, [now] more than ever, users should be wary about who and what they trust," he said.
Symantec's alert also noted: "Be wary of what you are doing on the Web, especially when it comes to current news stories. If [a site] asks you to download a new codec or open a PDF [file], just say no!"
The H1N1 virus was another hot topic hitting inboxes in recent months, as reported by McAfee and Cisco IronPort.
Phishing can be costly. According to earlier estimates from Gartner, each phishing attack last year cost the U.S. financial services industry an average US$351.
This article was originally posted on ZDNet Asia.
Talkback Most Recent of 7 Talkback(s)
-
June malware report
It would be very helpful if they would list which problems affect which of
the popular operating systems and which were cross platform.
gertruded6th Jul 2009 -
Obvious
As long as it says W32 or Win32, it's obviously about the worst OS ever made, Windows.
EmperorDarius6th Jul 2009 -
RE: June malware report - something's phishy
Here is one for July. Yahoo! CA Anti-Spy detected
Trojan.Win32.StartPage.fw .It wouldn't allow me to quarentine it as it blocks admin rights. Yahoo1 support was unable to remedy the problem. I had an ocassion to call Dell Tech Support (?) After a very lenghty session with them taking control of the computer and running various programs, making all kind of changes I still have the Trojan. I have searched several anti-virus maker sites and none I have found have any information on it. I even tried support from Vipre that I have installed and not only can't they fix it the scan doesn't even show it.
rublejim2@...6th Jul 2009 -
RE: June malware report - something's phishy
That is a 4 year old piece of malware. I do not believe you have had problems with it. Just Google the name and you should find plenty of help and alternate names for it.
steve@...6th Jul 2009 -
RE: June malware report - something's phishy
Download MalwareBytes.org "free version" and run it will get ride of your Trojan's, if you can't download it have someone download it to a CD and then run it on your computer.
little_momster@...6th Jul 2009 -
ha ha ha Malwarebytes.
I make so much money off of clients that use to use that software. They quickly learned not to use it and to actually suck it up and buy a scanning tool. If you want a real Scanner that is a free trial just to get away from the infections, download KasperSky. Any version of that software will fix it.
Stayaway from Malwarebytes. I make about 300 a week just off PC's that use that software. That says a lot. !! kaspersky.com !! they are in the top listed scanners right now and growing. Beware free scanners. The days of free software downloadable online is about dead, and you can be sure that the security softwares out there are not completely free. Just because your not giving them money doesn't mean that your not paying for it. here are a few links that you can use to get the job done correctly.
KasperSky Virus Scan online
http://usa.kaspersky.com/products_services/free-virus-scanner.php
Download the best Internet Security Suite here and have a 30 day fully functional Security software
http://usa.kaspersky.com/trials/home-users/internet-security/
Download the simple stand alone virus scanner here
http://usa.kaspersky.com/trials/home-users/anti-virus/
The mobile version is here
Ultra Portable
http://usa.kaspersky.com/trials/home-users/security-for-ultra-portables/
Mobile Phones
http://usa.kaspersky.com/trials/home-users/mobile-security/
This will work Awesome even if you are infected prior to scan. The best feature in this software is that it is the only software out there that is independant of MS that has Full Access to the Kernel. They also work very Closely with MS on how to correctly manage the windows OS. Hope this works.
Ez_Customs7th Jul 2009 -
inre: Malwarebytes
Thank you very much !! A friend of mine sent me these 2 links:
http://www.scancomplete.com/download/trojanwin32startpagefw-removal-tool
http://www.exterminate-it.com/malpedia/remove-win32-startpage-fw
I ran them both and neither worked. I haven't tried any of the ones you sent yet. Would you believe that a Dell Support Tech (?????) ran the Malwarebytes on this Laptop ? And not only that the Tech (????) I had some issues on the PC and after me telling him emphatically that I didn't want IE 8 ( final ) uninstalled because even the Beta version of 8 worked way, way better. He did any way. I am having the same old problems with 7 as before. I did the XP Pro repair and the computer is stuck and the last window "Please wait...."
I can't help but wonder if some of the Anti-Spyware developers have a basement department that designs all that crap. And I also wonder it their programs are written to show virus ect. when there isn't any.
rublejim2@...8th Jul 2009
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox




