Phishing attacks account for more than one in two viruses

28/1/10

More than half (55.59 per cent) of all malware sent on email is an attempted phishing attack, according to analysis of malware in January 2010 by managed security firm, Network Box. Phishing attacks soared before Christmas (to 57 per cent of malware), as criminals attempted to exploit the number of people shopping online, but the numbers have stayed at a similar level through January.

Brazil continues to dominate as the top source of viruses, though it is down slightly from last month, accounting for 15.7 per cent of all viruses (against more than 20 per cent last month). The number of viruses coming from the UK has increased slightly, at 3.3 per cent (up from 2.6 per cent in December).

Germany has appeared in the top 10 sources of viruses and spam for the first time, now accounting for 2.3 per cent of all viruses, and 2.4 per cent of all spam.

Volumes of spam and viruses are up from the US on last month at 10 per cent (up from 8.7 per cent) and 11.1 per cent (up from 7.8 per cent) respectively.

Simon Heron, internet security analyst at Network Box, says: “We normally expect to see phishing attacks drop slightly after Christmas, but this year we’re seeing the number of attacks staying high. Sustained economic difficulties combined with shoppers seeking online sales bargains create an ideal environment for criminals. What’s interesting is the increase in attacks from two of Western Europe’s major economies – the UK and Germany – as well as from the more ‘traditional’ centres of attack.”

January 2010 statistics are:

Top Ten Viruses

Threat Name Daily Average %
spam.phish.url 55.59030
nbh-bscript 8.19998
nbh-bgtrack 3.17229
trojan-spy.html.fraud.gen 3.08991
packed.win32.krap.x 3.06587
nbh-bbadhdr 3.02722
packed.win32.krap.w 2.29849
spam.porn.porn_nb_pornscore_low 2.28161
spam.porn.porn_nb_pornhint_34 1.18828
trojan-downloader.win32.piker.brn 1.14261

Top Ten Trojans

Threat Name Daily Average %
trojan-spy.html.fraud.gen 0.02856
trojan-downloader.win32.piker.brn 0.01169
trojan.win32.buzus.cvcz 0.00271
trojan.win32.buzus.cxph 0.00056
trojan.win32.buzus.czth 0.00018
trojan-downloader.win32.injecter.ga 0.00014
trojan.win32.buzus.cxfe 0.00012
trojan-downloader.win32.piker.bqr 0.00007
trojan-spy.html.fraud.ig 0.00005
trojan-downloader.win32.pif.vk 0.00004

Top Ten Intrusions

Threat Name Daily Average %
NETBIOS 20.64416
BOGON 4.79730
PINGFLOOD 0.74421
HTTP-S-WEBDAV 0.06987
ICMP 0.06926
HTTP-S-WEBDEX 0.03345
HTTP-S-UNIXATTACK 0.02389
HTTP-S-IISATTACK 0.01479
SOBIG-F 0.00955
HTTP-S-WEBATTACK 0.00185

Top Ten Sources of Viruses

Country Daily Average %
Brazil 15.78429
US 11.17623
Korea 6.94176
China 4.00652
India 3.31532
UK 3.31419
Argentina 2.52681
Poland 2.36682
Australia 2.35427
Germany 2.35297

Top Ten Sources of Spam

Country Daily Average %
US 9.95928
Brazil 7.75611
India 6.69439
Korea 5.20953
China 4.82817
Vietnam 4.64929
Russia 4.37322
Colombia 2.77046
Ukraine 2.59108
Germany 2.47696

Back