'Highest' phishing rate to date

By Victoria Ho, ZDNet Asia
Monday, July 06, 2009 06:59 PM

June marked an increased in malware and the "highest rate of phishing attacks to date" on the Web, Fortinet's latest report on online threats found.

The threat management vendor released on Monday its latest monthly report, which highlighted the current reign of Trojan horses and "disappointing" anti-spam campaigns.

Of the overall 108 newly-reported vulnerabilities in June, 62 were active exploits, indicating an "all-time high" of 57.4 percent, Fortinet said.

A significant proportion of the attacks were traced back to Asia--specifically, Singapore, Japan and Korea, which ranked second, third and fourth place, respectively. Some 13.57 percent of all attacks originated in Singapore.

However, Fortinet said the majority of overall activity came from the United States, which contributed 22 percent of all reported exploits.

Online games sites hosted the most number of Trojans, followed by Zbot variants W32/Zbot.M and W32/Zbot.V, which climbed to second and third place, respectively. The Zbot malware spreads keylogging and data-siphoning Trojans through e-cards sent via e-mail, directing users to malicious sites.

Another commonly used malware redirecting visitors to infected sites was the JS/PackRedir.A, which moved up 36 positions on the list to fifth position, said Fortinet.

In a separate release Monday, antivirus company Symantec released an alert warning of another Trojan, Infostealer.Bancos, which attempts to steal passwords after by enticing users to click on infected PDF files. Infostealer.Bancos has most recently been seen in PDF files sent via e-mail messages that purport to reveal Elvis Presley's whereabouts, said Symantec.

Efforts in vain
According to Fortinet's report, spam levels remain unchanged in spite of efforts to take down spam-spreading network, 3FN/Pricewert.

Derek Manky, Fortinet's project manager of cyber security and threat research, said in the report: "There were some very noteworthy trends that surfaced in the June report, such as the growing popularity of Web-borne malware, which we see driving the next generation of threats to online services.

"Hackers continue to attempt to drive mass traffic to their threats, utilizing various tactics aided by large online communities and as a result, [now] more than ever, users should be wary about who and what they trust," he said.

Symantec's alert also noted: "Be wary of what you are doing on the Web, especially when it comes to current news stories. If [a site] asks you to download a new codec or open a PDF [file], just say no!"

The H1N1 virus was another hot topic hitting inboxes in recent months, as reported by McAfee and Cisco IronPort.

Phishing can be costly. According to earlier estimates from Gartner, each phishing attack last year cost the U.S. financial services industry an average US$351.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

OpenAmplify developer's diary - part three: Topic intention comparisons

Web Development

Justin James chronicles his process of using Hapax's OpenAmplify Web service to create an application that can match documents with content that is similar or identical to the source document.


Read more »



 
Virtualize your way to cost savings
Build an infrastructure that is flexible, scalable, and economical, as you strive to become a truly agile business.

Red Hat Outlines Its Virtualization Strategy and Roadmap for 2009
» Watch the video




What Y2K can teach us about 2012

Blog thumbnail

Dec. 21, 2012. It's a big day on the calendar, particularly because some believe it marks the last day of the world as we know it. The apocalypse. Armageddon.

The..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web