Scareware rogue software reaches threat peak

[peter]

The highest level of total malware detected in more than a year, and four times greater than detected levels in September, was reported last month, including scareware tactics reaching an all-time peak with the worst attacks ever reported, according to security firm Fortinet’s latest threatscape analysis.

Featured Whitepaper

5 Best Practices for Smartphone Support

Fortinet says that, in total, seven malware variants listed in the top 10 malware list relate to scareware, “proving these attacks are occurring fast, hard and often.”

According to Fortinet’s Derek Manky, project manager, cyber security and threat research, the company has seen “record levels of scareware building off volume from September, and the danger in these threats is only becoming more serious as the methods for delivery evolve and the blending of attacks bring more complexity.

“As we’ve seen in the consistency of repeated threats, the old schemes are still proving to be good methods. Enterprises and consumers must take equal responsibility in understanding the disguises of these threats and implementing a multi-pronged security solution that addresses the different and changing characteristics of tried and true tactics.”

According to Fortinet, its latest report reveals that again dominated in the form of rogue security software, posing as the security suite AntiVirus Pro 2010, with users tricked into purchasing fake software to resolve their alleged problems, while the software contacts a remote server in order to obtain a malicious payload and receive updated copies.

Manky says that other components may be bundled with scareware, such as ransomware and bot agents, and that once an infection makes its way onto a system, the ‘floodgates open up for cybercriminals.”

Fortinet also reports that Scareware activity pushed Virut and Netsky out of the top 10 malware list for the first time in over a year, with Scareware the “chart topper” in October 2009.

The security firm also says that the high threat levels can be partly attributed to the popular money-making affiliate programs that tempt participants with a handsome pay-out on each software download purchased. “Tools and kits are readily available to participating affiliates, accelerating the distribution of scareware and other malicious components.”

Article Link at http://www.itwire.com/content/view/29137/53/

[Telic]

Scareware rogue software reaches threat peak

For some reason, no particular OS is named in this article.

So, to which PC-users does this nightmare scenario belong?

[Richard Chapman]

Peter, just FYI. When an article about end-user computer security fails to mention either the manufacturer of the affected OS or the OS/s, it is understood that the author has financial ties to the unnamed company. It may not be a direct connection. For all I know, you may have plastered "Microsoft" all over your article, but it was edited out by this sites publisher. That's still a financial connection. If that's the case, don't feel bad, you're in good company. National Public Radio in the USA aired a report about a serious computer security issue sans Microsoft. I was so upset I registered on their site but was too rattled to post a comment. To find the source of the sell out I turned off AdBlock and there it was on the home page, a Microsoft add.

If this ethically challenged style of journalism were applied to another story we might be informed about a recall of peanut butter due to salmonella poisoning but not what brand to avoid.

When the manufacture of a defective product is not named in a security bulletin, it means we have accepted not only their products, we have allowed them to dictate the threshold of the loss we are willing to accept.

I'll be watching this post to see if any would-be Microsoft defenders will drop one of those, "Yeah, but if Linux were as popular..." or "Linux gets viruses too...". I'm getting lazy in my old age. They are the "low hanging fruit" on these forums.