Skip navigation

Bournemouth, UK (11th May 2007) – ESET announced today that unlike the fairly broad threat profile for March, April showed renewed vigour among new threats, with the top five representing nearly 14% of all threat activity for the month.

Into first place charged Win32/TrojanDownloader.Ani.Gen, which exploits how Windows handles animated cursor (.ani) files. During the month of April, close to 5% of all detections were of the Ani.Gen threat, as malware writers made the most of this latest vulnerability in the operating system.

“This type of attack exposes even fairly sophisticated users to “drive by” attacks that can compromise their computers,” said Randy Abrams, Director of Education ESET in a recent blog entry. “For web browsing, the use of virtualization technologies such as SandboxIE can afford some protection, but email still remains a potential attack vector. Although, forcing Outlook to render email in plain text is a mitigating tactic, Outlook Express will remain vulnerable to attack, even when configured to render email in plain text.”

Win32/PSW.Agent.NCC, dropped from first place last month to second, account for 2.85% of detections during April. This trojan is part of a family used for stealing passwords through keylogging techniques. In third place is Win32/Pacex.Gen, a remarkably fast spreading mass-mailing worm discovered during March.

Win32/TrojanDownloader.Agent.AWF was fourth in April, with around 1.80 of detections. This threat is used for downloading other malware from web sites to create botnets that are then used for propagating spam and delivering DDOS attacks. The fifth place on the ranking for April was held by Win32/Perlovga, a trojan that has increased its presence during the current year. Moving up from seventh place last month, this threat can be received by users from different sources, like email, FTP or P2P applications. Perlovga is used to collect sensitive information from infected computers.

Top 10 Threats for April 2007

1 Win32/TrojanDownloader.Ani.Gen – 4.95%
2 Win32/PSW.Agent.NCC – 2.85%
3 Win32/Pacex.Gen – 2.21%
4 TrojanDownloader.Agent.AWF– 1.80%
5 Win32/Perlovga – 1.45%
6 Win32/Adware.Boran – 1.30%
7 Win32/PSW.QQRob – 1.27%
8 Win32/Nuwar.gen – 1.18%
9 Win32/Netsky.Q – 1.17%
10 Win32/Adware.Virtumode – 1.14%

###

For a copy of ESET’s Global Threat Trends – April 2007 please contact Sara Claridge, Marylebone Media Relations, sara@marylebone.co.uk or 0870 766 8482

About ThreatSense.Net

ThreatSense.Net reports detection statistics from millions of client computers around the world and is believed to be the most comprehensive malware reporting system in existence. From an original idea, realised in VIRUS RADAR http://www.virusradar.com, ThreatSense.Net, includes data about all types of threats seen attacking user systems, not just those transmitted via email.

The (anonymous) statistical information is collected from NOD32 users who enable the reporting service in the product, and it gives a comprehensive view of the behaviour and spread of malware in the real world. Currently data is collected from more than 10 million systems, and has tracked more than 10,000 different threats and malware families.

About ESET

Founded in 1992, ESET is a global provider of security software for enterprises and consumers. ESET's award-winning, anti-threat software system, NOD32, provides real-time protection from known and unknown viruses, spyware and other malware. NOD32 offers the smallest, fastest and most advanced protection available, with more Virus Bulletin 100% Awards than any other antivirus product (www.virusbulletin.com). ESET has been named in Deloitte's Technology Fast 500 four years running, and has an extensive partner network, including corporations such as Canon, Dell and Microsoft.

ESET is headquartered in Bratislava, SK; and is represented worldwide in more than 100 countries. For more information, please visit www.eset.co.uk or call 0845 838 0832.

PR Contact:

Sara Claridge
Marylebone Media Relations
sara@marylebone.co.uk
+44 (0) 870 766 8482
+44 (0) 7968 626838 (mobile)
www.marylebone.co.uk

This press release was distributed by ResponseSource Press Release Wire on behalf of Marylebone Media Relations in the following categories: Consumer Technology, Computing & Telecoms, for more information visit http://pressreleasewire.responsesource.com/about.