Korea becomes world’s biggest producer of internet viruses

7/4/10

Korea has taken over from the US as the world’s largest producer of internet viruses, according to analysis of internet threats in March by Network Box, a managed security firm. Korea now accounts for a massive 31.1 per cent of the world’s malware, a leap from February’s 8.9 per cent. This increase in Korean malware production is the result of the rise of compromised computers in Korea which are being used to send out phishing emails across the world.

The US is the second most prolific producer of viruses, holding steady from February at 9.34 per cent. Next comes Brazil at 6.04 per cent, China at 5.05 per cent and India at 3.86 per cent.

Korea also has the dubious honour of being responsible for the greatest number of intrusions (12.46 per cent), ahead of the US at 11.94 per cent.

South Korea hit the headlines recently with the news that the personal information of 20 million people had been stolen and sold on.

Spam levels are holding more or less steady from last month, with the US producing the largest number of spam emails at 9.7 per cent (slightly up on last month’s 6.7 per cent). Next in line is India at 6.6 per cent, Brazil at 5.5 per cent and Korea at 5.0 per cent.

Simon Heron, Internet Security Analyst for Network Box says: “The increase in compromised PCs sending out phishing in Korea in March means Korea dominates the virus league table. Note, however, that we include phishing in our virus stats which some companies do not.  We’ve seen Korea increasing its malware production over the last few months but March has seen a concerted effort to increase the production of phishing attacks globally.”

Top 10 threats in March 2010 were:

Top Ten Viruses

Threat Name Daily Average %
nbh-bgtrack 30.84567
spam.phish.url 13.69377
trojan-spy.html.fraud.gen 3.92433
trojan.win32.fraudpack.amxs 2.95492
spam.porn.porn_nb_pornhint_34 2.93611
trojan.win32.fraudpack.aopr 2.83709
policy_prohibits_'exe'_nested_at 2.67770
spam.porn.spam_nb_porn_subj_csk_1 1.80169
nbh-bbadhdr 1.78698
trojan.win32.fraudpack.aown 1.70723

Top Ten Trojans

Threat Name Daily Average %
trojan-spy.html.fraud.gen 0.01898
trojan.win32.fraudpack.amxs 0.00940
trojan.win32.fraudpack.aown 0.00927
clm.email.trojan-114 0.00895
trojan.win32.fraudpack.aopr 0.00845
trojan.win32.fraudpack.aodx 0.00793
trojan.win32.fraudpack.anif 0.00792
trojan-ransom.win32.digipog.ep 0.00682
trojan.win32.fraudpack.aoip 0.00630
trojan.win32.fraudpack.anmu 0.00603

Top Ten Intrusions

Threat Name Daily Average %
NETBIOS 28.70465
BOGON 5.42899
PINGFLOOD 0.77990
HTTP-S-WEBDAV 0.36282
HTTP-S-WEBDEX 0.04459
ICMP 0.02931
HTTP-S-UNIXATTACK 0.02882
SOBIG-F 0.02664
HTTP-S-IISATTACK 0.01822
HTTP-S-NIMDA 0.00292

Top Ten Sources of Viruses

Country Daily Average %
Korea 31.10969
US 9.34664
Brazil 6.04587
China 5.05782
India 3.86450
UK 3.36746
Poland 2.43852
Australia 1.73424
Romania 1.26005
Taiwan 1.22553

Top Ten Sources of Spam

Country Daily Average %
US 9.76643
India 6.68889
Brazil 5.53625
Korea 5.01392
Vietnam 4.52275
Russia 4.25227
China 3.86238
UK 3.62248
Italy 2.41587
Germany 2.34115

Top Ten Sources of Intrusions

Country Daily Average %
Korea 12.46590
US 11.94716
Hong Kong 8.98684
India 6.65830
Russia 5.39319
Australia 4.80504
China 4.52577
Brazil 2.62297
Malaysia 2.53101
Vietnam 2.40133

Top Ten Sources of Firewall Blocks

Country Daily Average %
US 16.54607
China 13.84392
Korea 12.93605
Malaysia 12.49715
Australia 10.14729
Hong Kong 6.54895
UK 1.94780
Canada 1.40399
Brazil 1.35698
Russia 1.24664

Back