Virus

Malware goes back to the future in May

New versions of old threats come back to haunt users

Written by Ian Williams

Security reports from May seem to have to transported us back a few years, with an old fashioned dialler and new versions of Netsky, Bagle, Sober and Puce topping the list of malware offenders.

Antivirus company Kaspersky said that new versions of old worms made a comeback last month, including Sober.aa jumping to fourth place.

The previous version of this worm, Sober.z, dates back to the middle of November 2005.

Although Sober.aa is described as "primitive", it has been able to surpass worms with far more advanced functionality. Kaspersky predicts that it may well climb higher in the ratings in the months to come.

Topping security firm Fortinet's threat list in May is a dialler designed to call premium long distance numbers. However, like all modern bots, it may also download, execute and upgrade components.

W32/Dialer.PZ!tr was primarily reported throughout Mexico and the US, dialling into locations in Europe and Africa.

A new P2P worm called Puce.G, which spreads itself and infects files through file-sharing software, was first place on the BitDefender chart with 10.31 per cent of total reports. The worm last topped the malware charts in October 2006.

"With the virtual disappearance of mass-mailers form the top infectors, the trend towards consolidation seems to have reduced somewhat," said Viorel Canja, head of BitDefender Labs.

Meanwhile, data from MessageLabs shows an increase in sudden spam surges, or 'spikes', which target individual domains in an aggressive spam attack, similar to the recent assault on Tiscali.

In one spam spike that lasted only 11 hours, more than 10,000 messages were attempted, accounting for more than 75 per cent of the total messages received by the domain during the entire period.

"This month the bad guys continued with their aggressive attacks by developing new tactics to fly under the radar and cause the most damage," said Mark Sunner, chief security analyst at MessageLabs.

"With the increase in spam spikes and new techniques with image spam, it is crucial for businesses to take a multi-layered security approach among email, web and IM to protect employees and systems from malicious attacks."

While malware creators are resurrecting old worms, it appears that spammers continue to innovate and employ new methods to elude traditional anti-spam solutions.

Rather than embedding images in the body of an email message, spammers are now hosting images on sites that do not require registration and include links to those sites or an HTML image in the email message.

Tags:

Further reading

Dorf storms the malware charts

Accounts for almost 50 per cent of all malware seen during January   More...

Hacking tools top malware threats

Backdoors, key-loggers and droppers the main malware menaces   More...

Malware authors cut out attachments

Infected web pages now the attack du jour   More...

Total malware volumes grow 'dramatically'

Malicious code writers target the web in earnest   More...

Related articles

vnunet.com analysis: home PCs still wide open

New targeted attacks also on the rise   More...

2007 Roundup: The march of the botnets

Top 10 malware list for 2007   More...

Storm worm back with a vengeance

Quarter of all detected threats during August, says BitDefender   More...

Adware tops February malware chart

Kaspersky warns of Virtumonde Trojan downloaders   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

09 May 2008

2.51 MBWiMax muddle, Google tactics and asteroid bunkum More...

08 May 2008

3.26 MBBroadband Anywhere, phone-free transport and Web 3.0 More...

07 May 2008

3.19 MBUK success, a paucity of IT women and robot wars More...

Poll

DATA ENCRYPTION

DATA ENCRYPTION

Should encryption be mandatory for all personal data held by companies and governments?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Ofcom

Ofcom outlines future wireless vision

Wi-Fi healthcare and intelligent car brakes in the pipeline   More...

HP

HP Labs opens doors to academia

Innovation Research Program invites proposals related to current research   More...

Advertisement

Asteroid

Nasa plans manned mission to asteroid

Bruce Willis thankfully not going   More...

MySpace

MySpace offers opt-in data sharing

Deals signed with Photobucket, Twitter, eBay and Yahoo   More...

Advertisement