TMCnet News

Network Box: Mass phishing attacks down for third month in a row, says Network Box; But overall, threat levels are up more than 50 per cent
[August 29, 2008]

Network Box: Mass phishing attacks down for third month in a row, says Network Box; But overall, threat levels are up more than 50 per cent


(M2 PressWIRE Via Acquire Media NewsEdge)
RDATE:29082008

For the third month running, mass phishing attacks are down, according
to the latest threat statistics analysed by managed security company,
Network Box. Phishing attacks now make up less 44 per cent of viruses,
down from 57 per cent in July and from 69 per cent in June.

But overall, the number of threats hitting businesses has increased by
a massive 51 per cent on last month. Network Box reports that it sent
out around 120,000 more signatures for new viruses in August, compared
to July, with threats at "a critical level", registering four on the
company's alert condition scale, where the highest level is five.
Overall, the company issued around 30 per cent more push updates' to
its system in August (equating to around 14 extra per day), compared to
the previous month.
There has been a slight lift in viruses and spam sent from Chinaduring
the Olympics. Chinaranks in the top five sources (at number five) of
viruses this month, accounting for 3.5 per cent of all viruses - a
marginal increase on July's 3.3 per cent . It comes in at number three
for sources of spam - behind the USA and Turkey - accounting for just
over six per cent of all spam sent (up from 5.5 per cent last month).

The USAis still the most prevalent source of spam and viruses,
accounting for nearly 27 per cent of all viruses and 17 per cent of all
spam sent.

Koreastill tops the charts for intrusions, accounting for a massive 30
per cent of all intrusions (up from 26.5 per cent last month). The
USAis still in second place, at just under 15 per cent.

The number of viruses sent from the UKhas also lifted slightly,
accounting for just over five per cent of all viruses sent (up from 4.5
per cent last month).

Simon Heron, Internet Security Analyst at Network Box, comments: "It is
interesting to see that the proportion of phishing relative to other
malware has been down over the last few months. Unfortunately, it
doesn't mean that phishing scams are on the way out, only that other
malware has been on the increase. Its been an active summer, with DNS
and BGP vulnerabilities revealed, a rash of blogging attacks and Google
hacks. In the immortal words of Hill Street Blues: lets be careful
out there'!."

Top Ten Sources of Viruses

1. USA
26.6%

2. Australia
5.4%

3.
Brazil 5.2%

4. UK
5%

5. China
3.5%

6. Korea
3.3%

7. Turkey
3.2%

8. Russia
2.9%

9. Germany
2.2%

10.India
2.2%

Top Ten Sources of Spam

1. USA
16.8%

2. Turkey
6.6%

3. China
6.1%

4. Australia
5.2%

5. Russia
4.9%

6.
Brazil 4.5%

7. UK
3.9%

8. Korea
3.6%

9. Thailand
2.9%

10.Poland
2.8%

Top Ten Sources of Intrusions

1. Korea
30.5%

2. USA
14.8%

3. Hong Kong 6.0%

4. China
5.5%

5. Australia
4.4%

6. Malaysia
4.1%

7. Turkey
2.7%

8. Russia
2.6%



9. Thailand
2.1%

10.Poland 2%


Top Ten Viruses

1. spam.phish.url 44%

2. nbh-bscript
15.1%

3. spam.porn.spam_nb_porn_subj_csk_1 4.4%

4. trojan-downloader.html.agent.km 3.6%

5. can-2003-0161 3.1%

6. trojan-spy.html.fraud.gen 2.1%

7. spam.porn.url_porn_adult-sexuallyexplicit 2.0%

8. spam.porn.porn_nb_pornhint_1 1.9%

9. clm.email.pornteaser-1 1.8%

10.policy_prohibits_'exe'_nested_at 1.4%

Top Ten Trojans

1. trojan-downloader.html.agent.km 0.088%

2. trojan-spy.html.fraud.gen 0.057%

3. trojan-downloader.win32.agent.abqe 0.029%

4. trojan-downloader.js.iframe.sh 0.027%

5. trojan-clicker.html.iframe.uj 0.019%

6. clm.email.trojan-2
0.011%

7. trojan-spy.win32.zbot.edw 0.009%

8. trojan-spy.win32.zbot.dun 0.006%

9. trojan-spy.win32.zbot.ebu 0.006%

10.trojan.win32.agent.zeg 0.005%

Top Ten Intrusions

1. NETBIOS
34.2235%

2. BOGON
11.2455%

3. PINGFLOOD
3.54373%

4. ICMP
0.26997%

5. HTTP-S-WEBDAV 0.05083%

6. SOBIG-F
0.01814%

7. HTTP-S-WEBDEX 0.01371%

8. HTTP-S-UNIXATTACK 0.00528%

9. FTP-S-LOGONOV 0.00496%

10.HTTP-S-NIMDA 0.00294%

About Network Box:

Network Box Limited (NBL) is an international managed security services
company, specialising in unified threat management (UTM). It
continuously defends the networks of its customers using PUSH
technology to instantaneously update protection, from 12 Security
Operations Centres spread around the globe. NBL's customers in Asia,
Australia, North America and Europe include companies such as BMW,
Nintendo and Toyota, as well as banks, utilities companies and
government organisations.

CONTACT: Kate Hartley, Carrot Communications
Tel: +44 (0)207 386 4862
Fax: +44 (0)207 386 4865
e-mail: [email protected]
WWW: http://www.carrotcomms.co.uk
e-mail: [email protected]
WWW: http://www.network-box.co.uk
WWW: http://www.network-box.com

((M2 Communications Ltd disclaims all liability for information
provided within M2 PressWIRE. Data supplied by named party/parties.
Further information on M2 PressWIRE can be obtained at
http://www.presswire.net on the world wide web. Inquiries to
[email protected])).

Copyright ? 2008 M2 Communications Ltd.

[ Back To TMCnet.com's Homepage ]