ScamFraudAlert  


Go Back   ScamFraudAlert > DDOS & Spam Attacks - Strom Worm Botnets and Zombie Computers
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

DDOS & Spam Attacks - Strom Worm Botnets and Zombie Computers How save are you online? How save is your computer? This forum will focus on the treats that botnets pose. We see this as an IMMINENT DANGER

   

Citizen Media Law Project: Legal Resources for Citizen Journalists
Reply
 
Thread Tools Rate Thread Display Modes
  #1  
Old 12-06-07, 09:05 AM
Scrub's Avatar
Scrub Scrub is offline
Administrator
 
Join Date: Feb 2005
Location: CyberWorld
Age: 63
Posts: 22,065
Rep Power: 10
Scrub is on a distinguished road
F-Secure Reports Amount of Malware Grew by 100% During 2007

F-Secure Reports Amount of Malware Grew by 100% During 2007

As Much Malware Produced in 2007 as in the Previous 20 Years Altogether

SAN JOSE, Calif.--(BUSINESS WIRE)--In its 2007 data security summary, F-Secure reports of a steep increase in the amount of new malware detected during 2007. In fact, the amount of cumulative malware detections doubled during the year, reaching half a million. This indicates that network criminals are producing new malware variants in bulk.

“We’ve never seen as many samples arrive at our labs,” says Patrik Runald, Security Response Manager at F-Secure Corporation. “We would be unable to handle such huge loads if we would not have built a high degree of automation into our malware analysis systems over the past years.”

While no truly new malware technologies were seen, the existing ones were refined and adapted for much greater effectiveness. Social engineering remains a key method for propagating malware and more productive malware development tools and kits are increasingly used by the criminals.

One example of a refined technology was the “Storm Worm” botnet. The successful social engineering methods the Storm gang used during the first half of 2007 were further developed in the second half of the year. Also, the technical setup of the Storm botnet is unique: in addition to using a novel peer-to-peer setup to avoid one vulnerable central point of control, the botnet also has a capability of using DDoS-attacks to retaliate against anti-virus researchers investigating the botnet. Such aggressive behavior from the botnet makes it necessary for researchers to use caution in their work, especially as the potential computing power of the Storm botnet is quite significant.

Understandably, financial transactions remain a favorite target for network crime. The amount of phishing sites continues to increase, but as bank customers have become more aware of this threat, the criminals have started employing more sophisticated techniques. One example of these is banking trojans that use methods such as injecting themselves directly into the browser application (Man-in-the-Browser attacks).

Other increasing data security phenomena during 2007 included parasitic behavior, like the Zlob DNSChanger, and increasing security exploit activity for Apple products, including Macs, iTunes and the iPhone. Also the vulnerability of large databases containing personal data has become an issue with several major leaks reported during the year, including tens of millions of e.g. credit card numbers or bank account information. Such leaks enable so called “spear phishing” attacks with very well targeted information. The increased popularity of social networking services carries similar risks.

On the mobile security front, Symbian S60, as the most popular smartphone platform, has done a good job of curbing malware with its 3rd edition software. Nevertheless, F-Secure continues to see spy-tools for the Symbian S60 3rd edition platform. Despite the fairly tightly controlled Symbian signing process for applications, spy-tools are able to get through the process by being submitted as “back-up” software. Finally, the increasing popularity of “unlocking” the security controls of both iPhone and Symbian phones is introducing increased risks for the unlocked phones.

The full 2007 data security wrap-up is available at F-Secure.com > 2007.

F-Secure predicts the increase in malware volume will continue in 2008. The criminals are successfully creating a network-based underground ecosystem, trading both malware development tools, skills, capabilities and resources ever more effectively. At the same time, the reach of the law enforcement agencies remains limited in the global network domain. 2008 will be a challenge of endurance.

About F-Secure Corporation

F-Secure Corporation protects consumers and businesses against computer viruses and other threats from the Internet and mobile networks. F-Secure’s award-winning solutions are available as a service subscription through more than 150 Internet service providers and mobile operator partners around the world, making F-Secure the global leader in this market. The solutions are also available as licensed products through thousands of resellers globally. F-Secure has received the Frost & Sullivan 2007 award for Distribution Strategy Leadership. The company aspires to be the most reliable security provider, helping make computer and smartphone user’s networked lives safe and easy. This is substantiated by the company’s independently proven ability to respond faster to new threats than its main competitors. Founded in 1988 and headquartered in Finland, F-Secure has been listed on the OMX Nordic Exchange Helsinki since 1999. The company has consistently been one of the fastest growing publicly listed companies in the industry. The latest news on real-time virus threat scenarios is available at the F-Secure Data Security Lab weblog at F-Secure Weblog : News from the Lab.

Contacts

LEWIS PR for F-Secure
Bryan Pope, 415-992-4400
fsecureus@lewispr.com
__________________
Your Computer Is At Risks
Get McAfee Free SiteAdvisor


McAfee, Inc

Reply With Quote
  #2  
Old 12-06-07, 09:10 AM
Scrub's Avatar
Scrub Scrub is offline
Administrator
 
Join Date: Feb 2005
Location: CyberWorld
Age: 63
Posts: 22,065
Rep Power: 10
Scrub is on a distinguished road
F-Secure Reports Amount of Malware Grew by 100% During 2007

Quote:
This is shocking. A must read.
IT Security Threat Summary for H2 2007:

Bulk Amounts of Malware, Storm, Apple, and Databases
Quote:
Using sensationalized versions of real headlines as a template proved to be a very clever bit of social engineering and was initially very successful. However, during H1 the headline technique's success declined as it was repeated too often. So the gang behind Storm adjusted their procedures. During the second half of 2007 (H2), they have continuously updated their social engineering tactics. Targeting the U.S. — they have used holidays such as Labor Day and seasonal events such as the beginning of the National Football League (NFL) season. Targeting others — the gang keeps up-to-date with popular trends and sites. One of their tricks was the promise of seeing "yourself" in a supposed YouTube video in a message pointing to a fake YouTube site.
__________________
Your Computer Is At Risks
Get McAfee Free SiteAdvisor


McAfee, Inc


Last edited by Scrub; 12-06-07 at 09:13 AM.
Reply With Quote
Reply

Bookmarks

Tags
100% , 2007 , amount , fsecure , grew , malware , reports

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -5. The time now is 09:00 PM.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Page generated in 0.11345 seconds with 10 queries