Windows and Android malware continue to steal show

INDIA: Quick Heal Technologies Pvt Ltd has released the findings from its Annual Windows Malware report, where PC continues to be the extensive target for malware authors today. The report, generated by the Threat Research and Development center of Quick Heal Technologies - one of the oldest R&D centers in India -- is a complete assessable research.

Sanjay Katkar, technical director and CTO, Quick Heal, says: "It is difficult to scrunch the extent and depth of cyber-attacks that are reported by our Research and Development Lab. Our report is a comprehensive coverage of the most predominant attacks that were observed in 2013 and covers the Windows and Android platforms. As researchers, it is also part of our duty to incorporate trends to look out for in 2014."

Key findings of the Quick Heal's 2014 Threat report:

* Windows malware saw a rise of 80 percent in samples that were received at the Quick Heal Research and Development Lab. As compared to 2012, there has been 40 percent rise in new and unique malware.

* While Trojans grabbed the major share of the pie at 77 percent of reported detections, Bots and Backdoors stole the next chunk at 15 percent.

* The most notable botnet incident of 2013 was the birth of the CryptoLocker. Delivered by botnets and devised to extort money by encrypting files and holding them on ransom, this ransomware adds itself to the list of Windows startup programs.

* Web-based malware also included a new breed of online fraud - Watering Hole attacks. In these attacks, a compromised system can give the attacker a freeway to carry out a host of activities, including reading emails, viewing stored data, stealing username and passwords, or installing key loggers.

* A whopping 800 percent surge in Android malware samples received.

* Total malicious programs detected by Quick Heal amounted to 431397.

* Attackers are quickly adapting to a mobile-friendly eco-system.

* Security in App stores still a cause for concern and user data leakages through malicious apps still continues.

Katkar adds: "Windows XP still has about 30 percent of market share. With Microsoft about to withdraw support for the second most popular Operating System in April 2014, the unpatched machines will represent a serious danger to the security of the networks that they are connected to and the internet in general. This might also lead to an increase in Advanced Persistent Threats. But, Windows is not the only thing in focus in 2014, Apple Mac and iOS are platforms that are gaining popularity and that will also lure attackers."

The report also contains a crisp description of the trends to watch out for in 2014:

* With Windows XP and Office 2003 support rapidly reaching the end of the line, the imminent exposure of unpatched systems to zero-day attacks is cause of serious concern.

* Social Media will continue to attract malware authors to devise tactics that include social engineering, malware, spam and phishing attacks.

* Advanced Persistent Threats (APTs) that are currently being used for carrying out industrial espionage, might go hand-in-glove with money-making malware that will make them a much used form of attack.

* Ransomeware will be on the high priority list of IT security companies. This is one form of attack that is often tricky to control and might spread to mobile platforms.

* As Apple Mac OS and iOS become more popular, they will be targeted often.

* The "Internet-of-things" can be used as avenues for attacks as more and more devices connect to the growing network.

* Growing supply chain attacks are a cause for concern and require strict security policies and execution.

The proliferation and rapid adaptation of numerous devices continues to be a source for concern. As devices and platforms multiply, so do the malware modifications and instances. Cybercriminals are getting smarter and modifying old techniques to use against new targets. Quick Heal Technologies is dedicated towards understanding how these techniques can be obliterated and how real-time protection can be provided.