Malware Miscellany, July 2008
- Greediest Trojan targeting banks
This month, the winner is a modification of Trojan-Spy.Win32.Bzub.bvq – it's quite modest in its ambitions, targeting a mere 36 banks, a relatively low number for malware in this category.
- Greediest Trojan targeting payment systems
Trojan-Banker.Win32.Banker.qhq targets three payment systems simulaneously
- Greediest Trojan targeting payment cards
Trojan-Spy.Win32.Banker.qdo targets three payment card systems – exactly the same number as its close relative in the previous category
- Stealthiest malicious program
July's nomination in this category was taken by Backdoor.Win32.Hupigon.cqzq – notwithstanding the program being packed seven times, it still got added to our antivirus databases
- Smallest malicious program
In July, Trojan.BAT.KillWin.vx demonstrated its dislike of Windows by using its 36 bytes to delete winlogon.exe, a system file.
- Largest malicious program
The 203MB of Trojan-Win32.Haradon.ga, this month's winner, were spread in the guise of a screensaver.
- Most common vulnerability on the Internet
The category 'Most malicious program', a fixture in previous Miscellanies, is no longer particularly indicative of the malware landscape. So this month we've introduct a new category – 'Most cmmon vulnerability on the Internet', i.e. the one most exploited by malicious users. This month the victory goes to Trojan.Clicker.HTML.Iframe.sy, which makes up more than 12% of all vulnerabilites found on web pages used by malicious users to infect victim machines.
- Most common malicious program on the Internet
The category 'Most common malicious program in email traffic' has also changed. Readers of this column may remember that the winner of that nomination remained unchanged over several months. In order to give a more representative picture, this cateogory is now called 'Most common malicious program on the Internet. Trojan.Win32.Agent.sav wins out in July, as it was involved in 5.52% of all attempts to infect users.
- Most common Trojan family
Trojan-Downloader.Win32.Zlob makes an appearance this month, with a relatively low 1217 modifications.
- Most common virus/ worm family
This category again features Worm.Win32.AutoRun with another 126 new modifications in July.
If you would like to comment on this article you must first