[ news_security_news ] Kaspersky Top Twenty Back To Normal
Doug Caverly Staff Writer
2006-10-02
Insider Reports RSS Feed
Kaspersky Lab has released its latest Online Scanner Top Twenty, and the report indicates that, in comparison to last month, "the malware landscape has returned to a more normal state of affairs."
"The places occupied by worms last month have been taken over by malware which is traditionally present in the online scanner ratings: Trojan-Downloader and Trojan-Dropper programs," wrote Senior Virus Analyst Alexander Gostev. Trojan-Downloader.Win32.Delf.awg, which is new to the list, actually made it to the number one spot.
This piece of malware came attached to "a strange email from an unknown girl who offered to share her summer photographs and tales of her holiday." The "alleged sender" identified herself alternately as Masha, Liza, and Lena, and a lot of people (it's fair to assume they were men) were apparently interested enough in the girl's summer vacation to open the attachment.
This "tried and tested social engineering," as Gostev described it, "helped caused one of the biggest outbreaks of Trojan-Spy LdPinch that we've seen over the past few months. LdPinch was the program which Delf.awg installed on the machines of unsuspecting or careless users."
There was one item on the list left over from "the unexpected data produced by August" - "Backdoor.IRC.Zapchast managed to stand its ground, even rising to second position," Gostev wrote. "This, together with Backdoor.Win32.mIRC-based (a Trojanized mIRC client) in 20th place and Backdoor.Win32.Rbot.gen in 18th place, shows that virus writers are exhibiting renewed interest in creating botnets which can be controlled via IRC."
In a more general sense, Gostev was surprised by "the total absence of Trojan-Spy programs in September's ratings," and by "the number of email worms," which "have appeared in large numbers." Details on these findings, and the rest of Kaspersky Lab's report, can be found here.
Tag: Online Scanner Top Twenty
Add to Del.icio.us | Digg | Yahoo! My Web | Furl
Get all the updates in RSS:
About the Author:
Doug is a staff writer for SecurityProNews, InternetFinancialNews, SearchNewz, and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|