Web threats

Today we’ve been getting more and more reports of a particular Backdoor.Win32.SdBot variant spreading. This SdBot is packed using UPX, Upolyx and Morphine, we detect it using our generic signature as Backdoor.Win32.SdBot.gen.

In the last week or so, new trends in using IM (instant messaging) applications to spread malicious code have been on the rise.

Sober.q is sending out spam

Protection mechanisms have gained in popularity

Social engineering: an ongoing love story

Bagle threats evolve from email worm to a complex network of zombies; author milks for profit.

8 years ago today, the first protected mode virus was detected ITW in Russia. Virus.DOS.PM_Wanderer was a milestone in Russian virus-writing history: the first attempts to write a protected mode virus in Russia were in 1994.

Blogs now being used to download malware

MSN Messenger 7 released yesterday

Kaspersky Anti-Virus Web Scanner beta – killing malware directly from the web

Melissa, a pioneer email virus celebrates its sixth birthday

We have seen an increase in IM-Worms over the last couple of weeks.

Today we detected a new Email-Worm which downloads and install AdWare onto the infected computer: we named it Email-Worm.Win32.CWS.a.

We’ve received a new variant of Wootbot, an IRC Trojan. The file is detected as Backdoor.Win32.Wootbot.gen, but contains an additional function: it will penetrate machines with MySQL server installed.

New Net-Worm.Win32.DipNet.d seems to be the cause of high network traffic on port 11768