Rising tide of web-based e-threats

Most Commented

Unified Communication for your Biz

Improve your contact center performance. See how you can make a difference.

Watch Now

Reach the ICT Community

Engage and build your ICT audience with CIOL online advertising.

Know more

Rising tide of web-based e-threats

BitDefender’s August list of top 10 e-threats is dominated by web-based threats

Tuesday, September 09, 2008

Email This

Print This

Comments

RSS

UK: BitDefender's August list of top 10 e-threats is dominated by web-based threats. Clicker.CM, a prevalent ad-serving Trojan tops the list.

Three variants of the Wimad trojan downloader (a fake codec downloader usually found on malicious websites) take up positions two, three and four.

Closer to home at number five is Trojan,Qhost.AKR, a piece of malware aimed directly at BitDefender users which tries to disable the antivirus' update feature, thus compromising the host system. This is followed by a generic detection for a Flash exploit (used by multiple pieces of malware) in sixth position, while Trojan.Swizzor.1, another very old and rife web-based threat, enters at seventh position.

A curious appearance at number eight is an ActiveX exploit used to trick a browser into downloading and installing malware. The exploit targets an ActiveX control called Sina DLoader which is used by many (legitimate) Chinese websites. Whilst a cause for concern to anyone affected this is a rare occurrence outside of China.

A trojan that spreads via P2P file sharing takes ninth place, while the last spot goes to a downloader for a fake antivirus package "XP Antivirus". "XP antivirus has previous form," commented Head of Virus Research, Sorin Dudea.

"It used to appear with a valid digital signature and a lengthy EULA, from sites with security-related names. As such it was somewhat of a champion in the social engineering area, convincing victims that it was in fact a legitimate piece of security software.

"Measures taken to revoke the malware's digital signature by GlobalSign and the denial of anonymity to the people who ran sites hosting it by Directi, seem to has put a dent in the operation," says Dudea.

Pos    Name                                                   %
1    Trojan.Clicker.CM                                  7.38
2    Trojan.Downloader.Wimad.A                  5.35
3    Trojan.Downloader.WMA.Wimad.N        3.89
4    Trojan.Downloader.WMA.Wimad.S        2.87
5    Trojan.Qhost.AKR                                2.58
6    Exploit.SWF.Gen                                    2.56
7    Trojan.Swizzor.1                                   2.51
8    Exploit.SinaDLoader.A                           2.38
9    Trojan.Autorun.TE                                 2.06
10    Trojan.FakeAlert.Gen.1                       1.88
11    OTHERS                                             66.55

©CIOL Bureau

Would you like to on this article?

Be first to comment on this article

Name
Email
Your reply

Windows 7: Should CIOs migrate?

China wooing Indian IT companies

Arrested NASA scientist worked on Chandrayaan-1

Yahoo triples profit, beats expectations

Polaris eyes emerging mkt post LaserSoft takeover

Riverbed announces Steelhead Mobile 3.0

Samsung announces TouchWiz packin' smartphones

Intel in talks with ITI for WiMAX JV

ZTE, Huawei, Ericsson ranked top networking vendors

McAfee intros new email and web security appliance

	Simplify Business Management. ERP solutions by IBM
	Carry your Dream, Convey your Value with ZTE
	Get EMC Efficient.Learn more

	Get expert views on Mobilin V2
	How to make your enterprise productive
	Unified Communication can impact business. Know how

	Making Web3.0 a Reality!
	CIOL Enterprise Next :What's NEXT in IT? :
	Decrease Total System Costs With Cyclone IV FPGAs

	Reach your desired Target Audience and realize high ROI
	Effective ways of Customer Acquisition through Demand Generation
	Reach 2,500 potential Enterprise Customers!