[ news_security_news ]
Virus Top Twenty From Kaspersky
Chris Crum
Staff Writer
2006-06-01
 Insider Reports RSS Feed
Kaspersky Lab announced the publication of its Virus Top Twenty for May, which actually isn't all that different from its Top Twenty from April.
Kaspersky announced its top 20 as the following:
To gather this data, Kaspersky used figures for malicious programs detected both in email traffic and stats from the Kaspersky Online Scanner. The company says that "global email worm epidemics are already a thing of the past," adding:Let's take a look at the statistics. Mytob.c, which in February firmly settled in top position with about 30% of all traffic, remains at the top, keeping its competitors at a safe distance. A fight for second position is still going on: Mydoom, NetSky, Bagle and Mytob have remained in the top five over the past few months and even years. But by the summer of 2006 it turned out that they have been outlasted and overtaken on the way to the top - by South Korean worms that most Europeans are not very familiar with and which have rarely been mentioned by the mass media.
Two variants of LovGate have made their way to the second and fourth positions in the rating, leaving the remaining two top-five positions to NetSky. Apparently, this result is due to NetSky.t going down from the second position to the fifth, reducing its presence in mail traffic almost by half. This is just what we anticipated in previous months. Kaspersky points out that Scano.ab and Scano.ag are new to the scene, though Scano.e was at #14 in April.
"This malicious program builds on the ideas implemented in the Feebs worm, which first appeared in the winter of 2005," says Kaspersky. "Scano, however, differs from Feebs in that it includes a polymorphic JavaScript dropper, which delivers the worm to its victims."
"Polymorphic technologies are becoming increasingly popular among virus writers, because the previous methods used to conceal malicious code from antivirus programs have become almost totally ineffective," the company adds.
Kaspersky expects these Scano variants to be gone from the June list, but doubts that Scano will be gone altogether.
About the Author:
Chris Crum is a staff writer for SecurityProNews and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
