April 5, 2013 at 13:20March 2013 Information Threat Survey
As in previous months, the Win32 / Qhost Trojan tops the ranking of threats in Russia, moreover, by a large margin from the rest of the threats, “dozens”. At the same time, its activity continues to decline for the third month, from 15.91% in January to 11.98% in March 2013.
This malware modifies the hosts file to redirect the user to phishing resources. Its high activity, first of all, is associated with a rather simple technique of work used by it, as well as with a wide range of phishing resources.
In general, threats across Russia show different dynamics. The upward trend was demonstrated by the Win32 / StartPage Trojans (1.12%), Win32 / Bicololo (2.84%), the Win32 / Dorkbot worm (2.04%), as well as malicious HTML / ScrInject web page objects (3, 90%) and JS / Iframe (3.16%).
Win32 / Bicololo has shown steady growth over the past three months - in January its prevalence was 2.07%. In addition to Win32 / Qhost, Win32 / Conficker (1.20%), HTML / IFrame (1.95%), INF / Autorun (1.95%) and Win32 / Spy.Ursnif (2.71%) showed a downward trend. ) In March, Russia's total share in the global volume of malware amounted to 8.14%.
File infectors are still in the top ten global threats; like last month, they are represented by Win32 / Sality (2.84%), Win32 / Ramnit (1.68%), Win32 / Virut (1.08%). In March, each of them showed a slight decline.
In addition to these viruses, other threats showed a downward trend: Win32 / Conficker (2.18%), Win32 / Dorkbot (2.00%), Win32 / Qhost (1.67%), HTML / IFrame (1.63% ) In March, only HTML / ScrInject (2.99%), INF / Autorun (2.95%) and Win32 / Bundpil (1.34%) saw growth. The Win32 / Bundpil worm, like Win32 / Dorkbot, spreads via removable media, relying on the included autorun feature in the OS.
Global threat statistics are as follows:
Threat statistics for Russia:
This malware modifies the hosts file to redirect the user to phishing resources. Its high activity, first of all, is associated with a rather simple technique of work used by it, as well as with a wide range of phishing resources.
In general, threats across Russia show different dynamics. The upward trend was demonstrated by the Win32 / StartPage Trojans (1.12%), Win32 / Bicololo (2.84%), the Win32 / Dorkbot worm (2.04%), as well as malicious HTML / ScrInject web page objects (3, 90%) and JS / Iframe (3.16%).
Win32 / Bicololo has shown steady growth over the past three months - in January its prevalence was 2.07%. In addition to Win32 / Qhost, Win32 / Conficker (1.20%), HTML / IFrame (1.95%), INF / Autorun (1.95%) and Win32 / Spy.Ursnif (2.71%) showed a downward trend. ) In March, Russia's total share in the global volume of malware amounted to 8.14%.
File infectors are still in the top ten global threats; like last month, they are represented by Win32 / Sality (2.84%), Win32 / Ramnit (1.68%), Win32 / Virut (1.08%). In March, each of them showed a slight decline.
In addition to these viruses, other threats showed a downward trend: Win32 / Conficker (2.18%), Win32 / Dorkbot (2.00%), Win32 / Qhost (1.67%), HTML / IFrame (1.63% ) In March, only HTML / ScrInject (2.99%), INF / Autorun (2.95%) and Win32 / Bundpil (1.34%) saw growth. The Win32 / Bundpil worm, like Win32 / Dorkbot, spreads via removable media, relying on the included autorun feature in the OS.
Global threat statistics are as follows:
Threat statistics for Russia: