September brings a change of seasons – has the colder weather caused any familiar malicious programs to go into hibernation? Let’s find out by taking a look at this month’s malware miscellany:
- Greediest Trojan Targeting Banks: this title goes to a modification of Trojan-Spy.Win32.Small.dg, which manages to target the clients of 134 banks at once – quite an impressive feat!.
- Greediest Trojan Targeting Payment Systems: Trojan-Spy.Win32.Agent.baa is the winner this month, and it’s designed to harvest access data for three different e-payment systems.
- Greediest Trojan Targeting Plastic Cards: Once again the title goes to a Banbra variant – this month it’s Trojan-Spy.Win32.Banbra.df, which targets three payment card systems. And for the third month running, it’s a program with Brazilian roots that wins this category.
- Stealthiest Malicious Program: Trojan.Win32.Delf.or, which is packed ten times with a variety of different packers, takes September’s title.
- Smallest Malicious Program: This month brings us the tiny 19 byte Trojan.BAT.KillFiles.gc, but in spite of its small size, this program is able to delete plenty of data from the user’s computer.
- Biggest Malicious Program: This title goes to a modification of Trojan.Win32.Haradong.bj, which weighs in at a hefty 234 MB – the authors of this Trojan don’t seemed to be at all concerned about efficient use of resources!
- Most Malicious Program: Autumn’s leader so far is Trojan-Downloader.Win32.Agent.bxx, which uses a variety of methods to disable security solutions, including terminating processes in memory and deleting the security programs themselves.
- Most Common Malicious Program in Email Traffic: Although Email-Worm.Win32.NetSky.q has been around for years, it still managed to account for 25.22% of all malicious email traffic in September – 4% higher than in August.
- Most Common Trojan Family: The winner in this category is Trojan-Downloader.Win32.Agent, with a ‘mere’ 663 modifications – nearly a hundred fewer than August’s winner.
- Most Common Virus/ Worm Family: This nomination goes to Zhelatin, back after two months off with 55 new modifications detected this month.
This month has seen some regulars either retaining their dominance, or returning after a break. The first snows here have had an effect on our physical surroundings – we’ll see next month if there’s been any impact on the malware landscape.