Autorun-Based Malware Leads E-Threat Report

Trojan.AutorunInf.Gen heads up May 2010 threats

With a percentage of 13.24 of the global malware, May’s top e-threat was s Trojan.AutorunInf.Gen - a generic mechanism to spread malware using flash drives, memory cards or external hard-disk drives, according to BitDefender. Some families of malware, amongst which is the infamous Downadup clan, use this approach to trigger further infections.

Ranking second in this month’s e-threat report, Win32.Worm.Downadup.Gen also known as Kido or Conficker is responsible for 5.84 percent of the global infections. Relying on a Microsoft® Windows® vulnerability, this worm spreads on computers in the local network and restricts users’ access to Windows Update and security vendors’ web pages. Microsoft has remedied this problem in the most recent versions, but computer users need to update their operating systems and antivirus solutions.

Last month faced a wave of rogue AVs that apparently spread to this month as well. And that is why Trojan.FakeAV.KUE ranks third with a percentage of 5.11 of the total amount of infections. This detection covers JavaScript code - hosted either on malicious sites and/or innocent victim sites that have been infected – that’s used to trigger fake alerts on websites connected to the placement of rogue antivirus software.

The fourth place at 2.68 percent is taken by Win32.Sality.OG, the only file infector of this chart. This malicious e-threat appends its encrypted code to executable files (.exe and .scr binaries); furthermore it deploys a rootkit and kills antivirus applications running on the computer it can hide its presence on the infected machine.

In fifth place there is the newcomer Trojan.Swizzor.2, with 2.12 percent of the total number of the global infections. This detection deals with an obfuscated downloader that usually opens the way for further malicious software.

BitDefender’s May 2010 Top Five E-Threat list includes:

Trojan.AutorunINF.Gen 13.24%
Win32.Worm.Downadup.Gen 5.84%
Trojan.FakeAV.KUE 5.11%
Win32.Sality.OG 2.68%
Gen:Variant.Swizzor.2 2.12%
Other 71.01%

Resource Centre Categories

Anti-Spam	Web Site Security	E-mail Content Management/Filtering	Authentication
Anti-Virus	Integrated Applicances	IM Security	Public Key Infrastructure
Data Loss Protection	Database Security	Mobile Encryption	E-mail Archiving
E-mail Encryption	Data Recovery	Patch Management	Mobile Security
E-mail Security	Digital Forensics	Firewalls	Web Content Management
End Point Security	Web Server Protection	Hard Disk Encryption	Log Management
Identity Management	Penetration Testing	Remote Access	Virtualization
Internet Security	Application Security	VoIP Security	Anti-Malware
Intrusion Detection and Prevention Systems	Anti-Adware/Spyware	Security Information Management	Encryption
Network Access Control	Password Protection/Management	Enterprise Management	Wireless Security
Network Security	Digital Rights Management	VPN
Content Management	Storage	Secure eCommerce
SSL VPN	Managed Services	Secure File Transfer

Physical Security

Access Control	Security Product Distributor	Fog Security	Battery Back Up
Biometrics	Perimeter Protection	Shredders	Asset Protection
Laptop Security	Video Surveillance	Window Film	Home Automation
Sound & Communications	Wireless Security	Systems Integrator	IP-Based Video
Alarm Monitoring	Identification Products	Locks & Door Hardware	Safes & Vaults
Key Management	Smart Cards	Burglar Alarm Systems	Building Automation
Asset Tracking	Intercom Equipment	Window Bars
Fire & Life Safety	Guard Services	Structured Wiring

Procedural Security

Business Continuity	Compliance	Background Checks	Crisis Management
Fraud	Loss Prevention	Disaster Recovery	Association
Pandemic Planning	Training & Awareness	Investigations	Penetration Testing
Privacy	Incident Management	Risk Analysis	Vulnerability & Risk Assessment
Risk Management	Security Audits	Employee Monitoring