Tampilkan postingan dengan label Malware News. Tampilkan semua postingan
According to Panda Security Annual Security Report 2012, 27 million new strains of malware were created last year alone and 74,000 new samples were released every day.
Delving into geographical analysis, China topped the list of countries with 54.89 percent of infected PCs, followed closely by South Korea at 54.15 percent and Taiwan at 42.14 percent. All three countries were the only Asian countries in the top ten list, according to Zdnet Reports.
One reason for the growth is the increased use of exploit kits such as Black Hole, which can exploit multiple system vulnerabilities to infect computers automatically without user intervention.
The "Trojan!MMarketPay.A@Android" which affected 100,000 China Mobile subscribers, and started buying applications from China Mobile's marketplace on behalf of the user.
Rating: 4.5
Reviewer: Unknown
ItemReviewed: China on the top of malware infected country in 2012
Banking Malware Shylock spreads via Skype to target specific Countries
Sabtu, 19 Januari 2013
Posted by Unknown
The home Trojan-banker known as Shylock has updated with new functions. It is noticed that Shylock is now capable of spreading using the popular Voice over IP service and software application, Skype. This allows the malicious Trojan-banker to infect more hosts and continue to be a prevalent threat, according to CSIS Security Group.
Shylock is one of the most advanced Trojan-banker currently being used in attacks against home banking systems. The code is constantly being updated and new features are added regularly.
The Skype infection is based on a malicious plugin called msg.gsm and allows the malware to send messages and transfer files, clean messages and transfers from Skype history and even bypass the Skype warning for connecting to servers.
Besides from utilizing Skype it will also spread through local shares and removable drives. Basically, the C&C functions allow the attacker to:
- Execute files
- Get cookies
- Inject HTTP into a website
- Setup VNC
- Spread through removable drives
- Uninstall
- Update C&C server list
- Upload files
Currently, the Shylock detection ratio is zero, which shows its power with advance features. According to a map showing the distribution of Shylock infections that was published by CSIS, there's a high concentration of victims in the UK. However, there are also many Shylock-infected computers throughout mainland Europe and the US.
Rating: 4.5
Reviewer: Unknown
ItemReviewed: Banking Malware Shylock spreads via Skype to target specific Countries

