Threat Category: Windows malware | Page 30

Greediest Trojan e-payment systems, stealthiest malicious program, most common malicious program in email traffic, most common Trojan family and others.

This report provides an overview of different types of keyloggers, gives examples of losses caused by keyloggers, and provides recommendations on how to protect against them.

Greediest Trojan e-payment systems, stealthiest malicious program, most common malicious program in email traffic, most common Trojan family and others.

Nevertheless, Trojan-Downloader programs, the most widespread class of Trojans, remain among the leaders: representatives of this class are in second and fourth place in our January rankings.

For the moment at least, all Warezov variants are being beaten back by Bagle and other malicious programs. This is supported by the fact that only Warezov.do has remained in the ratings, and in seventeenth place at that.

Kaspersky Lab presents the Online Scanner Top Twenty for December 2006

My thoughts on Jim Allchin’s comments

Yesterday, we added detection for Virus.Win64.Abul.a to our antivirus databases.

We’ve been receiving a number of new samples of Trojan-Downloader.Win32.Delf.awg from users. The good news is that KAV 6.0 and KIS detect these new modifications of Delf proactively.

We’ve noticed an increase in the prevalence of Y!/MSN-aware worms. These rely on various social engineering tricks to lure the user into a malicious website.

A very nice description of a Trojan which in an attempt to keep other “competitors” out, installs an antivirus which it uses to keep the system clean. Unsurprisingly, the antivirus which the Trojan installs is KAV

This latest half-yearly report covers the most significant changes in malicious code evolution over the last six months and included a number of predictions as to how the situation may develop based on the statistics we have today.

Slander and plagiarism

Why viruses aren’t elks

No justification for writing malware

Reports

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

Windows malware

Malware Miscellany, march 2007

Keyloggers: How they work and how to detect them (Part 1)

Malware Miscellany, february 2007

Online Scanner Top Twenty for January 2007

Virus Top Twenty for January 2007

Online Scanner Top Twenty for December 2006

Antivirus and Vista

New file infector for Win64

New modifications of Trojan-Downloader spammed

The IM worms armada

Backdoor.Win32.Agent.uu aka Spamthru

Kaspersky Security Bulletin, January – June 2006: Malware Evolution

No good deed goes unpunished

Good guys doing bad things, part 2

Good guys doing bad things

Reports

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Armored Likho expands its cyber-espionage toolkit

Mirage Kitten targets Middle East and Africa region with new malware