The recent surge in malware attacks against zero-day flaws in some of the most widely used software packages is confirmation of an IT administrator's worst nightmare: Stand-alone, signature-based anti-virus software offers no protection from sophisticated online criminals. During 2006, there was a wave of zero-day attacks against Microsoft Office applications. The link for this article located at eWeek is no longer available. . Isolated antivirus solutions fall short against zero-day malware threats, underscoring the necessity for enhanced protective measures.. Zero-Day Security Risks, Software Protection Strategies, Malware Defense Tactics. . LinuxSecurity.com Team
Attacks on Windows machines in the first six months of 2004 jumped nearly four-and-a-half times over the same period last year, a security firm said Monday, leading to an explosion in the number of hacker-run bots. . . .. During the first half of the year, Symantec's global network of 20,000 sensors documented nearly 4,500 worms and viruses that targeted Windows, an increase that took even the company's researchers by surprise. "We knew that the number was up [over 2003], but the sheer size of the increase was a big shock once we looked at the data," said Alfred Huger, Symantec's senior director of engineering for its security response team. In an associated trend, the bulk of those Windows-attacking worms and viruses came with a backdoor component. Such backdoors, like those deployed by worms as varied as MyDoom and Bagle, are becoming standard fare in malicious attacks. "The vast majority of these worms come with a backdoor to create a spam proxy or monitor transactional data or steal credit card data," said Huger. In turn, the "popularity" of backdoors led to an upsurge in the number of bots and bot networks in the first half of 2004. According to Symantec, the number of monitored bots -- compromised computers that can be controlled by an attacker, then used for almost any task, including denial-of-service attacks or sending spam -- climbed from around 2,000 per day at the start of the year to more than 30,000 per day by its mid-point, with spikes as high as 75,000. The link for this article located at Gregg Keizer, TechWeb News is no longer available. . In light of an alarming surge, Symantec has identified more than 4,500 specific worms, highlighting a concerning rise in assaults on Windows platforms and the expansion of botnets.. Windows Attacks, Malware Trends, Bot Networks, Cybersecurity Insights. . Anthony Pell
MessageLabs predicts that spam will account for over 70 percent of e-mail traffic by April of 2004. Given that current antispam legislation is largely ineffective, the onus will continue to be on you and me to protect ourselves. . . .. 2003 WAS SUPPOSED to be the year to end e-mail-borne viruses, given that both MS Outlook and antivirus apps have become much better at stopping them. But in 2004, I expect to see more of these pests, especially more spam-related ones like MiMail.l, as professional spammers continue using them both to collect e-mail addresses and to distribute their messages anonymously. MiMail.l wasn't the first worm involved with junk e-mail. As early as January 2003, antivirus experts noticed a worm called Sobig was aiding the sending of spam. By early summer of 2003, there was evidence that Sobig was building a network of what are called open proxies, systems that act as blind intermediary portals to the Internet. By the time the Sobig.f variant came along in mid-August, the open proxy network created by earlier variants helped Sobig.f infect over one million PCs worldwide in less than 24 hours, making it the fastest spreading computer virus or worm on record. The August infection further expanded the open proxy network, giving future variants the ability to spread even faster. The link for this article located at ZDNet is no longer available. . In 2004, experts predicted a rise in e-mail viruses taking advantage of software vulnerabilities and user habits, complicating the fight against spam and malware. Email Security, Malware Trends, Spam Alerts, Virus Threats, Antivirus Measures. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.