US and Brazil continue to dominate as sources of spam and viruses

30/8/09

The US and Brazil continued their output of spam and viruses through August, although levels have dropped slightly since July, according to managed security firm, Network Box.

Analysis of Internet threats by Network Box in August 2009 shows that the volume of malware, which peaked in July (when volumes increased by 300 per cent), are back down at levels seen in June (around four viruses per customer, per hour). Spam is also down slightly, averaging around 90 spam emails per customer, per hour (from a peak of around 120 in May).

The US continues to dominate as the main source of the world’s viruses, producing 15.9 per cent of all viruses. It is followed closely by Brazil, which produces 14.5 per cent (similar levels to last month’s 14.1 per cent).

Brazil continues to be the biggest source of spam, producing 11.6 per cent of all spam, followed by the US at 8.6 per cent and Korea at 7.2 per cent.

Korea remains the biggest source of intrusion attacks, at 17.3 per cent.

Phishing attacks also remain high, at 33 per cent of all viruses. This is down slightly from last month's 36.2 per cent, but still significantly higher than in June, when phishing attacks made up just five per cent of all viruses.

Simon Heron, Internet Security Analyst for Network Box says: "Businesses and individuals still need to be alert to threats through the remainder of the summer, particularly phishing attacks. We’ve seen a huge increase in SQL injection attacks so it's important that anyone using web-based applications or servers keeps their security up to date."

Top Ten Viruses

Threat Name Daily Average %
spam.phish.url 33.21048
trojan-spy.html.fraud.gen 31.36943
nbh-bscript 9.12995
nbh-bgtrack 6.69071
nbh-bbadhdr 2.46050
spam.porn.porn_nb_pornscore_low 2.29484
nbh-biframe 0.88644
email-worm.win32.netsky.q 0.59113
spam.porn.spam_nb_porn_subj_csk_1 0.50078
trojan-spy.win32.zbot.gen 0.44938

Top Ten Trojans

Threat Name Daily Average %
trojan-spy.html.fraud.gen 0.50360
trojan-spy.win32.zbot.gen 0.00407
trojan-downloader.win32.agent.byc 0.00210
clm.email.trojan-100 0.00153
trojan-downloader.win32.injecter.ga 0.00079
clm.trojan.agent-121419 0.00041
trojan-spy.html.bankfraud.bh 0.00041
trojan-spy.win32.zbot.zur 0.00012
trojan-downloader.win32.pif.qe 0.00003
clm.email.trojan.gzc 0.00003

Top Ten Intrusions

Threat Name Daily Average %
trojan-spy.html.fraud.gen 0.50360
trojan-spy.win32.zbot.gen 0.00407
trojan-downloader.win32.agent.byc 0.00210
clm.email.trojan-100 0.00153
trojan-downloader.win32.injecter.ga 0.00079
clm.trojan.agent-121419 0.00041
trojan-spy.html.bankfraud.bh 0.00041
trojan-spy.win32.zbot.zur 0.00012
trojan-downloader.win32.pif.qe 0.00003
clm.email.trojan.gzc 0.00003

Top Ten Sources of Viruses

Country Daily Average %
US 15.95060
Brazil 14.59091
Korea 5.40350
India 4.87306
China 4.70732
Poland 3.54333
Turkey 3.36206
Argentina 2.79017
UK 2.66823
Colombia 2.65764

Top Ten Sources of Spam

Country Daily Average %
Brazil 11.65504
US 8.60969
Korea 7.24476
China 5.99399
Vietnam 5.43537
India 5.11915
Poland 3.43597
Russia 3.40307
Turkey 2.92895
Colombia 2.43223

Top Ten Sources of Intrusions

Korea 17.37915
Hong Kong 11.86296
US 11.16204
Brazil 7.92412
Vietnam 5.68206
China 5.63609
Malaysia 3.90759
India 3.89841
Australia 2.34453
Russia 1.40535

For more information on security issues, see www.network-box.co.uk, or visit Simon Heron's blog at: http://blog.network-box.co.uk, or follow Simon on Twitter: http://www.twitter.com/networkbox.

Back