Threat Category: Potentially Unwanted Applications | Page 6

As in previous months, this malware rating is compiled from data generated by the Kaspersky Security Network (KSN). However, slightly different methods have been used to select and analyze the data.

We just described what happens on Kido controlled machines when the spambot Iksmas is installed and launched. However, Kido is also downloading a fake antivirus named SpywareProtect2009.

Last night the Kido (aka Conficker/ Downadup) botnet kicked into action – what everyone’s been on the lookout for since 1st April.

Today we detected a new potentially unwanted program for smartphones running Symbian S60 2nd edition – not-a-virus:Porn-Dialer.SymbOS.Pornidal.a

Criminals are using the Kido/ Conficker hype to bring their rogue Anti-Virus amongst the people.

Unexpected redirects

In its second month of compiling data, the new Kaspersky Security Network (KSN) technology revealed some significant changes amongst the most widespread malicious programs.

The format of the ‘Virus Top Twenty’ reports from Kaspersky Lab has changed as of July 2008

This month a total of 3 malicious programs for non-Windows platforms appeared out of nowhere.

Just the other day I found a browser plug-in on BitRoad dot net that people can download and use as a tool to download e-books. And yes…it was AdWare.Win32.Kitsune.f.

This annual report provides an overview the evolution of malware, adware and potentially malicious programs in 2007, and compares this data to that of 2006.

Over the last couple of days I’ve been looking at some of the latest tricks used by the creators of some adware – Virtumonde a.k.a Vundo.

This report surveys the evolution of malicious code in 2006, providing statistics on the increase in various types of malicious program, and an overview of significant trends.

Monitoring software made in Switzerland

StopBadware.org positions itself as ‘a “Neighbourhood Watch” campaign aimed at fighting badware.’

Reports

In this article, we discuss the tools and TTPs used in the SideWinder APT’s attacks in H2 2024, as well as shifts in its targets, such as an increase in attacks against the maritime and logistics sectors.

Kaspersky researchers analyze EAGERBEE backdoor modules, revealing a possible connection to the CoughingDown APT actor.

While investigating an incident involving the BellaCiao .NET malware, Kaspersky researchers discovered a C++ version they dubbed “BellaCPP”.

Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.

Potentially Unwanted Applications

Monthly Malware Statistics: June 2009

Bot-watching 2

The neverending story

Porn dialers for smartphones

Criminals Surfing the Kido/ Conficker Hype

Unexpected redirects

Monthly Malware Statistics for August 2008

Monthly Malware Statistics for July 2008

Online Scanner Top Twenty for June 2008

Beware of free plug-ins

Kaspersky Security Bulletin 2007: Malware evolution in 2007

Virtumonde/Vundo goes file infector

Kaspersky Security Bulletin 2006: Malware Evolution

Legal spyware

Named & shamed!

Reports

SideWinder targets the maritime and nuclear sectors with an updated toolset

EAGERBEE, with updated and novel components, targets the Middle East

BellaCPP: Discovering a new BellaCiao variant written in C++

Lazarus group evolves its infection chain with old and new malware

Subscribe to our weekly e-mails