Phishing attacks soar in the run up to Christmas

31/12/09

The number of phishing attacks rose dramatically in the run up to Christmas, according to managed security firm, Network Box. Analysis of internet threats in December 2009 show that just over 57 per cent of all threats were phishing attacks, compared to 28.3 per cent in November.

The greatest source of viruses and spam was Brazil, from where 20.9 per cent of all viruses and 9.1 per cent of all spam originated in December. This is up from 14 per cent and eight per cent respectively in November.

India is continuing to play a more significant role in the world’s threat landscape, with 6.8 per cent of all spam coming from the sub-continent (up from 4.2 per cent in November); and 4.1 per cent of viruses (static from November).

Simon Heron, Internet Security Analyst for Network Box says: "The run up to Christmas is traditionally a time for hackers to strike the vulnerable. A higher proportion of shopping is done online, with more money spent than at any other time of year. Christmas offers rich pickings for phishers. This is likely to continue through the sales in January, and we urge online bargain hunters to be vigilant."

Top Ten Viruses

Threat Name Daily Average %
spam.phish.url 57.05585
trojan-spy.html.fraud.gen 12.37705
nbh-bscript 4.74525
nbh-bgtrack 4.51228
packed.win32.krap.x 3.85399
nbh-bbadhdr 3.30799
spam.porn.porn_nb_pornscore_low 0.85546
spam.porn.porn_nb_pornhint_34 0.84341
spam.porn.spam_nb_porn_subj_csk_1 0.55408
backdoor.win32.bredolab.aug 0.53729

Top Ten Trojans

Threat Name Daily Average %
trojan-spy.html.fraud.gen 0.19640
trojan-banker.win32.bancos.kcx 0.00127
trojan.win32.buzus.cvcz 0.00099
trojan-downloader.win32.injecter.ga 0.00024
trojan.win32.buzus.cegf 0.00008
trojan-downloader.win32.pif.ui 0.00005
trojan-downloader.win32.pif.ul 0.00005
trojan-downloader.win32.pif.ud 0.00003
trojan-downloader.win32.pif.uk 0.00003
trojan.win32.buzus.ctsm 0.00002
Top Ten Intrusions

Threat Name Daily Average %

NETBIOS 28.63278
BOGON 5.59438
PINGFLOOD 0.74097
HTTP-S-WEBDAV 0.13970
ICMP 0.06467
HTTP-S-WEBDEX 0.04151
HTTP-S-UNIXATTACK 0.03746
SOBIG-F 0.01780
HTTP-S-IISATTACK 0.01711
HTTP-S-WEBATTACK 0.00304

Top Ten Sources of Viruses

Country Daily Average %
Brazil 20.90490
US 7.82734
Korea 5.39005
India 4.18913
China 3.47509
Argentina 3.13935
UK 2.61957
Russia 2.57538
Poland 2.57143
Italy 2.19215

Top Ten Sources of Spam

Country Daily Average %
Brazil 9.14405
US 8.77934
India 6.81418
Vietnam 6.49426
Korea 5.85177
China 5.48322
Russia 3.87158
Colombia 2.59535
Ukraine 2.54101
Romania 2.22399

Top Ten Sources of Intrusions

Country Daily Average %
Australia 22.34705
Korea 11.77134
US 8.99701
Hong Kong 8.85511
China 4.96804
Malaysia 4.38734
India 4.20848
Brazil 4.13375
Vietnam 3.66222
Ukraine 2.19536

For more information on security issues, see www.network-box.co.uk, or visit Simon Heron’s blog at: http://blog.network-box.co.uk/, or follow Simon on Twitter: http://twitter.com/networkbox.

Back