Overview of information threats in March 2013
As in previous months, the Win32 / Qhost Trojan program ranks the rating of threats across Russia, and with a large margin from the remaining threats of the “dozens”. At the same time, its activity continues to decline for the third month, from 15.91% in January to 11.98% in March 2013.
This malicious program modifies the hosts file to redirect the user to phishing resources. Its high activity, above all, is associated with a rather simple technique of work used by it, as well as with a wide range of phishing resources.
In general, threats to Russia show different dynamics. Win32 / StartPage (1.12%), Win32 / Bicololo (2.84%), Win32 / Dorkbot worm (2.04%) and malicious web pages HTML / ScrInject (3, 90%) and JS / Iframe (3.16%).
')
Win32 / Bicololo shows steady growth over the past three months - in January, its prevalence rate was 2.07%. In addition to Win32 / Qhost, Win32 / Conficker (1.20%), HTML / IFrame (1.95%), INF / Autorun (1.95%) and Win32 / Spy.Ursnif (2.71%) showed a tendency to decline. ). In March, Russia's total share in the global malware volume was 8.14%.
File infectors are still in the top ten global threats; as in the previous month, they represent Win32 / Sality (2.84%), Win32 / Ramnit (1.68%), Win32 / Virut (1.08%). In March, each of them showed a slight decline.
In addition to these viruses, other threats showed a declining trend: Win32 / Conficker (2.18%), Win32 / Dorkbot (2.00%), Win32 / Qhost (1.67%), HTML / IFrame (1.63% ). In March, only HTML / ScrInject (2.99%), INF / Autorun (2.95%) and Win32 / Bundpil (1.34%) showed an increase. The Win32 / Bundpil worm, like Win32 / Dorkbot, spreads via removable media, relying on the included autorun in the OS.
Global threat statistics are as follows:
Threat Statistics for Russia:
This malicious program modifies the hosts file to redirect the user to phishing resources. Its high activity, above all, is associated with a rather simple technique of work used by it, as well as with a wide range of phishing resources.
In general, threats to Russia show different dynamics. Win32 / StartPage (1.12%), Win32 / Bicololo (2.84%), Win32 / Dorkbot worm (2.04%) and malicious web pages HTML / ScrInject (3, 90%) and JS / Iframe (3.16%).
')
Win32 / Bicololo shows steady growth over the past three months - in January, its prevalence rate was 2.07%. In addition to Win32 / Qhost, Win32 / Conficker (1.20%), HTML / IFrame (1.95%), INF / Autorun (1.95%) and Win32 / Spy.Ursnif (2.71%) showed a tendency to decline. ). In March, Russia's total share in the global malware volume was 8.14%.
File infectors are still in the top ten global threats; as in the previous month, they represent Win32 / Sality (2.84%), Win32 / Ramnit (1.68%), Win32 / Virut (1.08%). In March, each of them showed a slight decline.
In addition to these viruses, other threats showed a declining trend: Win32 / Conficker (2.18%), Win32 / Dorkbot (2.00%), Win32 / Qhost (1.67%), HTML / IFrame (1.63% ). In March, only HTML / ScrInject (2.99%), INF / Autorun (2.95%) and Win32 / Bundpil (1.34%) showed an increase. The Win32 / Bundpil worm, like Win32 / Dorkbot, spreads via removable media, relying on the included autorun in the OS.
Global threat statistics are as follows:
Threat Statistics for Russia:
Source: https://habr.com/ru/post/175597/
All Articles