30 August 2010 - India has overtaken the US as the single biggest producer of viruses, according to analysis of internet threats by managed security company, Network Box. India is now responsible for 13.74 per cent of the world’s viruses, up from 9.5 per cent in July. Russia is the next in line, producing just over 11 per cent of viruses - a jump from last month’s 4.01 per cent. The US accounts for just over eight per cent, a significant decrease from 14.65 per cent last month.
Virus levels from the UK have dropped to 2.5 per cent; down from five per cent last month. The UK is now the seventh-largest threat producing country in the world (down from fourth last month).
The highest number of firewall blocks come from the US (18.3 per cent) and Korea (13 per cent). Simon Heron, internet security analyst for Network Box, says: “It is interesting to see that UDP:137 (NetBIOS’ name service) was the second most attacked port. It is obviously worth users and businesses checking their firewall rules as these figures indicate that there must still be systems out there with this port open to the internet. Also, it would appear that web proxies are also worth probing as TCP:8080 was third in the list, which suggests that hackers see this as another backdoor.”
Heron continues: “The country sources of these internet threats shifts each month, which shows how quickly internet criminals can move their operations round the world and launch attacks. Businesses need to be vigilant and ensure they are not opening up the back door to a hacker when they use new applications or technologies. From this month’s statistics, it would appear that proxies are seen as vulnerable.”
For more information on security issues, see www.network-box.co.uk, or visit Simon Heron’s blog at: http://blog.network-box.co.uk/, or follow Simon on Twitter: http://twitter.com/networkbox.
Top Sources of Viruses
| Country Daily Average % |
| India 13.74380 |
| Russia 11.05539 |
| US 8.01660 |
| Korea 6.57105 |
| Ukraine 6.03436 |
| Romania 2.60329 |
| UK 2.49997 |
| Taiwan 2.39421 |
| Brazil 2.18961 |
| Australia 1.54209 |
Top Sources of Spam
| Country Daily Average % |
| US 12.20073 |
| India 7.68707 |
| Brazil 5.40389 |
| UK 5.01344 |
| Vietnam 4.20971 |
| Russia 3.50869 |
| China 2.99988 |
| Germany 2.82460 |
| Korea 2.46865 |
| France 2.20162 |
Top Sources of Firewall Blocks
| Country Daily Average % |
| US 18.32495 |
| Korea 13.02207 |
| Australia 11.71345 |
| Malaysia 9.94794 |
| China 9.38075 |
| Hong Kong 6.50074 |
| ap 1.78698 |
| UK 1.76925 |
| Argentina 1.21397 |
| Taiwan 1.20937 |
Top Viruses
| Threat Name Daily Average % |
| nbh-bgtrack 10.56275 |
| packed.win32.katusha.o 5.67278 |
| trojan-downloader.win32.agent.eesv 4.64686 |
| backdoor.win32.bredolab.gni 3.49167 |
| nbh-multext 3.22248 |
| spam.porn.disguise_porn 3.16561 |
| nbh-bbadhdr 3.03657 |
| spam.porn.porn_nb_hot_nasty 2.77738 |
| trojan-spy.win32.zbot.alyp 2.23727 |
Top Trojans
| Threat Name Daily Average % |
| trojan-downloader.win32.agent.eesv 0.10808 |
| trojan-downloader.win32.fraudload.xexa 0.04118 |
| trojan-dropper.win32.hdrop.jo 0.04100 |
| trojan-spy.win32.zbot.alyp 0.02341 |
| trojan-dropper.win32.zbot.cn 0.02116 |
| trojan-spy.win32.zbot.amvf 0.01464 |
| trojan-spy.win32.zbot.ammv 0.00976 |
| trojan-spy.win32.zbot.anfz 0.00775 |
| trojan.win32.agent2.cuyv 0.00537 |
| trojan.win32.agent.evoy 0.00325 |
Top Intrusions
| Threat Name Daily Average % |
| NETBIOS 37.10737 |
| BOGON 6.70014 |
| HTTP-S-WEBDAV 0.46635 |
| PINGFLOOD 0.30035 |
| ICMP 0.02831 |
| HTTP-S-WEBDEX 0.02249 |
| SOBIG-F 0.01548 |
| HTTP-S-UNIXATTACK 0.00962 |
| FTP-S-LOGONOV 0.00931 |
| HTTP-S-NIMDA 0.00929 |
Top Firewall blocks by Port
| Protocol / Port Daily Average % |
| TCP:80 15.68085 |
| UDP:137 9.70943 |
| TCP:8080 5.89193 |
| UDP:123 4.55660 |
| UDP:53 3.62956 |
| TCP:443 3.20130 |
| UDP:138 2.61414 |
| UDP:161 2.27529 |
| ICMP:0 1.79926 |
| TCP:25 1.78652 |
Back