Global threat trends – May 2007

Pro

7 March 2007

Surge in new threats in May

Win32/TrojanDownloader.Ani.Gen was the top threat during May for the second month in a row, according to ESET’s ThreatSense.net reporting system. Out of the top 10 ranking threats, the Ani.Gen trojan constituted more than 4.6% of all threats.

 

advertisement



 

Ani.Gen remains first

During the month of May, more than 4.6% of all detections were of the Ani.Gen threat. Detected as Win32/TrojanDownloader.Ani.Gen, this threat is designed to exploit a vulnerability which deals with how the operating system handles ani (animated cursor) files.

Perlovga screams into second

Second in the ranking for May, we find Win32/Perlovga, a trojan that has increased its presence during the current year. The threat can be transmitted through email, FTP or P2P applications, and it is used to collect sensitive information from infected computers.

VBStat.J streaks up to third

In third place we find Win32/Spy.VBStat.J, a spyware program that monitors activity on infected PCs and displays popup ads. Agent.NCC Drops to Fourth

Win32/PSW.Agent.NCC was number four in May with around 1.69% of detections. This threat was in top place during March. This trojan is part of a family of Trojans that are used to steal passwords through keylogging techniques.

Rjump.A jumps up to fifth

The fifth place on the ranking for May is held by Win32/Rjump.A, a worm that includes a backdoor trojan component. Rjump.a propagates through external storage devices, such as portable hard drives, memory cards, pen drives, etc.

Remaining results

Below the Rjump.A worm, we find Win32/Pacex.Gen, a mass-mailing worm discovered during March with a remarkably fast spreading rate.

Seventh place was taken by Win32/Adware.Virtumonde, a well-known adware program that downloads and displays popup advertisements. It is also capable of downloading and executing other adware and malware.

In the last three positions of May’s TOP 10 detected malware we find a worm

(Win32/Netsky.Q), a password-stealing Trojan (Win32/PSW.QQRob) and a Trojan downloader (Win32/TrojanDownloader.Agent.AWF). The three threats garner between 1.32% and 1.50% of all detections each.

Worldwide coverage with ESET’s ThreatSense.Net

Currently, most spreading malware has a variety of different features and capabilities, and often there are several (or more!) variants of each one. Because of this, in addition to frequently updating your anti-virus solution, it is important to have proactive detection features, such as those used by NOD32, to be protected against the new and unknown threats that appear daily.

ThreatSense.Net, which reports detection statistics from millions client computers around the world is believed to be the most comprehensive malware reporting system in existence.

From an original idea, realised in VIRUS RADAR (http://www.virusradar.com), the reporting system has evolved to what is now ThreatSense.Net, vastly improving the statistical data gathered. Rather than only being email based, as with VIRUS RADAR, the information from ThreatSense.Net includes data about all types of threats seen attacking

user systems.

The (anonymous) statistical information is collected from NOD32 users who enable the reporting service in the product, and it gives a more comprehensive view of the behaviour and spread of malware in the real world. Currently data is collected from more than 10 million systems, and has tracked more than 10,000 different threats and malware families.


Sponsored by ESET NOD32 Ireland
1890 32 22 32
www.eset.ie



Read More:


Back to Top ↑

TechCentral.ie