Security and products; top ten threats and hoaxes reported in February.

Sophos has revealed the most prevalent malware threats and email hoaxes causing problems for computer users around the world during February 2007.

The figures, compiled by Sophos's global network of monitoring stations, show that the HckPk family has had the greatest impact on computer users this month, accounting for more than half of malware seen during February.

Hackers are increasingly using encryption and packer tools--such as those belonging to the HckPk family--to camouflage their malicious code. January's hardest-hitting worm, Dorf, plus the prevalent Dref mass-mailing worms are just two examples of the malware currently being hidden within HckPk programs. Sophos has also found that cybercriminals are constantly modifying their HckPk disguises in an attempt to bypass IT defences. The top ten list of malware threats in February 2007 reads as follows:

1. Mal/HckPk-C  50.3%
2. Netsky       15.1%
3. Mytob        12.5%
4. Zafi          4.8%
5. Sality        3.8%
6. Mydoom        3.0%
7. Bagle         2.4%
8. Clagger       1.4%
9. Nyxem         1.1%
10. SraDI        1.0%

"HckPk is a bit like Mr Potato Head--it uses disguises to bamboozle anti-virus protection into thinking the attachment is safe when, in reality, malicious code lies within," said Sophos. "Today's most widespread threats, such as Dref and Dorf, use HckPk, so by blocking it, we zap the nasty threats lurking inside.

www.sophos.com