2008: Malware deluge breaks all records
G DATA (Germany), – The malware industry has shifted up a gear and, since the beginning of the year, has swamped the Internet with a malware flood of truly biblical proportions. On a daily basis some 1,500 new malware agents are unleashed against Windows users. In the first six months of the current year alone, G DATA Security Labs has recorded more than 318,000 new malware creations - more malicious code than in the whole of 2007, which was itself a record. If the growth rate remains the same, this would mean an increase of more than 400 percent by the end of 2008. By contrast, an all-clear for the owners of smartphones. The forecast danger for these devices has been shown to be a pure marketing ploy. Within the same period, only 20 new viruses surfaced. Online criminals do not currently regard smartphones as lucrative sources of income.
In 2008, the worldwide networking of online criminals finally bore its threatening fruit. In the G DATA 2008 semi-annual malware report, the Bochum IT security specialists give an insight into the current dangers for PC users.
The explosive growth in malware has not taken Ralf Benzmüller, manager of G DATA Security Labs, by surprise: “Online criminality has grown into an industrial complex, which is orientated based on marketing considerations. As in the manufacturing industry, processes based on the division of labour are common practice amongst online criminals. The result is highly productive eCrime organisations, which can churn out malware. Therefore, we are not expecting a reduction in the current malware flood. Competition between online criminals and antivirus manufacturers has intensified beyond any expectation.
2008 has already broken all existing records and written a further unpleasant chapter in the history of the Internet.”
++ The Internet war zone: attack - infect - rob
The threat caused by primed websites has increased markedly. The expansion of malware within the Internet predicted by G DATA in 2007 has long since become the reality. The perpetrators of this concept use security holes in browser or web applications, such as Flash applications or Adobe Acrobat Reader. Contrary to long held assumptions, most infected websites do not form part of the “red light districts” of the Internet.
The majority of new malware is aimed at the theft of user data, such as online banking data, credit-card information or access data for online games, for example. Through the use of so-called backdoors, which install backdoor access, attackers can successfully take complete control of a computer and then insert further malware or integrate the PC as a zombie into botnets. It is therefore no surprise that this malware family is the undisputed leader of the top five with 75,027 new entrants.
++ Malware top five January to June 2008
Malware New entrants Fraction in percent
Backdoors 75,027 23.6 %
Downloaders/droppers 64,482 20.3 %
Spyware 58,872 18.5 %
Trojan horses 52,087 16.4 %
Adware 32,068 10.1 %
++ Smartphones: marketing bubble burst
According to G DATA’s analyses, the majority of smartphone viruses that occur are so-called proof-of-concepts. With just 41 new malware programs in six months, the danger potential can, however, be classified as almost negligible. A lack of business models, the short range of Bluetooth and the large number of operating systems all combine to render smartphones currently unattractive as a target for online criminals. If one considers the total number of new smartphone viruses since 2006, this becomes even more apparent: 115 smartphone viruses in 30 months.
G DATA is planning for a further increase in malware over the coming weeks and months. The upcoming large sporting events such as the Beijing Olympics, for example, could well make the situation worse. Online criminals use global events as a hook, which they can use to reinforce their hunt for data and increase their money making opportunities. A large increase in the number of phishing mails can therefore be expected.
Detailed information, figures and further trends can be found in the G DATA 2008 semi-annual report
Original Article
