Top twenty e-mail malware reported to Kaspersky in June.Top Twenty E-mail Malware Reported To Kaspersky In June 1. Net-Worm.Win32.Mytob.c 29.01% 2. Email-Worm.Win32Nyxem.e 16.70% 3. Email-Worm.Win32.LovGate.w 8.54% 4. Email-WormWin32.NetSky.b 5.55% 5. Email-Worm.Win32.LovGate.ad 4.02% 6. Net-Worm.Win32Mytob.1 2.92% 7. Net-Worm.Win32.Mytob.q 2.75% 8. Net-WormWin32Mytob.u 2.07% 9. Net-Worm.Win32.Mytob.x 1.92% 10. Net-Worm.Win32Mytob.a 1.86% 11. Email-Worm.Win32.NetSky.y 1.76% 12. Email-Worm.Win32.NetSky.x 1.58% 13. Net-Worm.Win32Mytob.v 1.51% 14. Net-Worm.Win32.Mytob.r 1.42% 15. Email-Worm.Win32.NetSky.q 1.25% 16. Net-Worm.Win32Mytob.w 1.11% 17. Email-Worm.Win32.NetSky.af 0.92% 18. Net-Worm.Win32Mytob.gen 0.88% 19. Net-Worm.Win32.Mytob.bx 0.83% 20. Email-Worm.Win32NetSky.t 0.82% Others 12.48% The virus world has suffered a shock. The general public and media may not have noticed, but an analysis of email antivirus Refers to detecting and blocking computer viruses. See antivirus program, behavior blocking, virus and virus hoaxes. logs reveals that the changes are quite stark. We have analyzed an·a·lyze tr.v. an·a·lyzed, an·a·lyz·ing, an·a·lyz·es 1. To examine methodically by separating into parts and studying their interrelations. 2. Chemistry To make a chemical analysis of. 3. these changes in this month's Top 20, and present them below. We are not yet sure of why these changes have occurred, but the Email Top 20 has not changed this much for a long while. Antivirus vendors issued a number of alerts during June, but most of these worms do not appear in the rankings. Take Bagle.fy, for instance, which we also detect as Bagle.mail and Baglel.gen. This variant variant /var·i·ant/ (var´e-ant) 1. something that differs in some characteristic from the class to which it belongs. 2. exhibiting such variation. var·i·ant adj. of Bagle was active in mid-June, although it appeared as a localized outbreak that lasted only a few days. A close look at the Top 20 shows that Bagle.fy did not make it into the rankings at all. One reason for this could be because many contemporary, worms reach their peak months after they first appear, which can be seen from the Nyxem.e case described below. Nyxeme occupies the second place in the June rankings. Virus and industry analysts undoubtedly remember this worm well. It appeared in January, 2006 and received a lot of media coverage. According to according to prep. 1. As stated or indicated by; on the authority of: according to historians. 2. In keeping with: according to instructions. 3. a number of antivirus vendors, Nyxem.e infected in·fect tr.v. in·fect·ed, in·fect·ing, in·fects 1. To contaminate with a pathogenic microorganism or agent. 2. To communicate a pathogen or disease to. 3. To invade and produce infection in. hundreds of thousands of machines around the globe, though mainly in India and Peru. Everyone waited with bated bate 1 tr.v. bat·ed, bat·ing, bates 1. To lessen the force or intensity of; moderate: "To his dying day he bated his breath a little when he told the story" breath for February 3, when Nyxem was supposed to delete files See file wipe and delete. on infected machines. The panic was so widespread that municipal authorities in Milan decided to leave their computers turned off on February 3. Fortunately, the hyped outbreak did not occur. In fact, Nyxem did not even appear in our Top 20 for several months. It seems as though we could have simply forgotten about Nyxem.e. But, lo and behold be·hold v. be·held , be·hold·ing, be·holds v.tr. 1. a. To perceive by the visual faculty; see: beheld a tiny figure in the distance. b. , Nyxem.e appeared in email traffic in early June and the numbers rose throughout the month to reach 17%. As a result, Nyxem.e is in second place this month. We don't yet know exactly what happened and where the dam broke, but we do urge users to take precautions precautions Infectious disease The constellation of activities intended to minimize exposure to an infectious agent; precautions imply that the isolation of an infected Pt is optional, but not mandatory. on July 3, since the file destruction module is programmed to run on the 3rd of every month. We don't advocate panicking, but heightened awareness and strict adherence to standard security policies is advisable ad·vis·a·ble adj. Worthy of being recommended or suggested; prudent. ad·vis  a·bil . The unexpected revival of Nyxem.e is only one of the unusual
events during June. The dramatic fall of longtime long·time adj. Having existed or persisted for a long time: a longtime friend; a longtime resident of Detroit. longtime Adjective leaders Netsky.q and Netskw.t is another surprise; and a fascinating one at that. Netsky.q was the most widespread email worm in 2004 and has remained at the top of our ratings since then. Netsky.t rose rapidly at the beginning of 2006 and continued to rise until June. This month both worms dropped significantly with Netsky.q falling to 15th place and Netsky.t to 20th. It is very possible that both worms will disappear entirely from our ratings in July. The rise of Nyxeme cannot be blamed for the fall of the Netsky variants, because all Nyxem.e did was to push LovGate.w to third place. It is much more likely several factors are to blame--namely, 3 Mytob variants returned to the ratings, a new Mytob appeared, and finally we have the latest Netsky variant, Netsky.af, which re-appeared in the ratings this month. Mytob.c in the meantime Adv. 1. in the meantime - during the intervening time; "meanwhile I will not think about the problem"; "meantime he was attentive to his other interests"; "in the meantime the police were notified" meantime, meanwhile continues to hold 1st place where it has been since February 2006. This month Mytob.c accounts for 30% of malware in email traffic. It is unclear what will happen in the next few months with Nyxem.e pushing ahead, though Bagle.fy might also take a shot at the top spot. Likewise, we can't forget about as yet unknown malware. www.kaspersky.com |
|
||||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion