Phishing attacks fall as Brazil drops down the spam charts

1/3/10

In January, more than half (55.59 per cent) of all malware sent on email was an attempted phishing attack, but February has seen this figure drop dramatically to 17.86 per cent, according to analysis by managed security firm, Network Box.

Brazil, which had been dominating the virus charts in recent months, has fallen to third place behind the US and Korea after a drop of 8.87 per cent in viruses produced. Viruses originating from the US also dropped from 15.7 per cent in January to 9.31 per cent in February, but the US still tops the virus production charts.  The number of viruses coming from the UK has decreased by 0.37 per cent, but it has still moved up one place in the charts and is now the fifth largest source of viruses.

Viruses originating from Korea have dropped by 2.25 per cent.

Levels of spam originating from the top three countries have also fallen. The US is still the top source of spam, but spam distribution has decreased by 3.26 per cent from the 9.95 per cent in January. Both India and Brazil have seen a decline in spam levels, but Brazils has been steeper at 2.70 per cent, meaning that India is now the second highest source of spam at 5.13 per cent.

Simon Heron, internet security analyst at Network Box, says: “The post-Christmas decline in phishing attacks has arrived late this year. As the recent spate of spam and phishing scams on Twitter have shown, malware producers are always looking for new methods to hook the reader, whether by hiding behind a friends identity, or exploiting a recent hot news item, they will stop at nothing to get people to click on that link.”

Top Ten Viruses

Threat Name Daily Average %
spam.phish.url 17.86923
packed.win32.krap.x 14.17654
policy_prohibits_'exe'_nested_at 7.62474
nbh-bgtrack 3.27905
recursion 2.27107
trojan-spy.win32.zbot.afhn 1.72278
trojan-downloader.win32.agent.dadz 1.67050
spam.porn.porn_nb_pornhint_34 1.43503
trojan-downloader.win32.genome.aitb 1.40007
nbh-bbadhdr 1.28434

Top Ten Trojans

Threat Name Daily Average %
trojan-downloader.win32.genome.aivt 0.02628
trojan-downloader.win32.genome.aitb 0.02461
trojan-downloader.win32.genome.ahoo 0.02425
trojan-downloader.win32.genome.aiuq 0.01977
trojan-dropper.win32.agent.blhj 0.01870
trojan-downloader.win32.agent.dadz 0.01787
trojan-downloader.win32.genome.akdc 0.01696
trojan-downloader.win32.genome.ajoz 0.01653
trojan-spy.win32.zbot.afhn 0.01635
trojan-downloader.win32.genome.ajtd 0.01564

Top Ten Intrusions

Threat Name Daily Average %
NETBIOS 17.31792
BOGON 3.92645
PINGFLOOD 0.58855
HTTP-S-WEBDAV 0.17193
HTTP-S-UNIXATTACK 0.02092
HTTP-S-WEBDEX 0.01679
HTTP-S-IISATTACK 0.01253
ICMP 0.00834
SOBIG-F 0.00527
HTTP-S-WEBATTACK 0.00188

Top Ten Sources of Viruses

Country Daily Average %
US 9.31486
Korea 8.91944
Brazil 6.90704
India 4.23632
Great Britain 2.93559
China 2.34339
Columbia 1.55920
Italy 1.42597
Argentina 1.41648
Australia 1.31732

Top Ten Sources of Spam

Country Daily Average %
US 6.69647
India 5.13585
Brazil 5.04845
Korea 3.78185
Russia 3.32902
Vietnam 2.37902
Great Britain 2.20524
Columbia 2.01360
Germany 1.92604
China 1.91750

For more information on security issues, see www.network-box.co.uk, or visit Simon Heron’s blog at: http://blog.network-box.co.uk/, or follow Simon on Twitter: http://twitter.com/networkbox.

Back