Cybercriminals continue to show their love for Valentine’s Day

February 13, 2010 · Filed Under Security Software, Software News · Comment 

PandaLabs provides tips for Internet users to protect their PCs from holiday-themed malware

PandaLabs, Panda Security’s malware analysis and detection laboratory, warns that cybercriminals are continuing to exploit Valentine’s Day with holiday-themed malware as a lure to trick users and infect computers.

As in years past, Internet users can expect to see numerous e-mails this weekend with links to malicious downloads, which are often perpetrated through romantic greeting cards or messages with subject lines related to Valentine’s Day. In 2010, cyber-crooks are also exploiting social networking sites such as Facebook or Twitter.

Social engineering remains cyber-crooks’ preferred technique for deceiving users. In these cases, cybercriminals obtain confidential information from users by convincing them to take a series of actions: a carefully selected social engineering ploy convinces users to hand over their data or install a malicious program, which captures information and sends it to fraudsters.

“The continued use of social engineering by cyber-crooks is a good indication of the high infection rate that this technique achieves. The technique works well, so criminals will continue to use it until people stop falling for it,” explains Luis Corrons, technical director of PandaLabs.

PandaLabs recommends Internet users follow these guidelines to avoid falling victim to computer threats this Valentine’s Day:

– Don’t open e-mails or messages received on social networks from unknown senders.

– Do not click any links included in e-mail messages, even if they come from reliable sources. This rule applies to messages received through any mail client, as well as those in Facebook, Twitter, or other social networks or messaging applications.

– If you do click on any such links, take a close look at the page you arrive at. If you don’t recognize it, close your browser.

– Do not run attached files that come from unknown sources. Stay on the alert for files that claim to be Valentine’s Day greeting cards, romantic videos or another related ploy.

– If a page seems legitimate but asks you to download something, you should be suspicious and choose not to accept the download.

– If, in any event, you download and install any type of executable file and you begin to see unusual messages on your computer, you have probably been infected with malware.

– If you are making any purchases online related to Valentine’s Day, type the address of the store in the browser, rather than going through any links that have been sent to you.

– Only buy online from sites that have a solid reputation and offer secure transactions, encrypting all information that is entered in the page. To check if a page is secure, look for the security certificate in the form of a small yellow padlock next to the toolbar or in the bottom right-hand corner of the screen.

– Don’t use shared or public computers for making transactions or operations that require you to enter passwords or other personal details.

– Have an effective security solution installed that is capable of detecting both known and new malware strains.

Tags: , , , , , ,

2010 Computer Threat Trends, PandaLabs forecast

December 17, 2009 · Filed Under Internet Software, Security Software, Software News · Comment 

Fake antivirus, bots and banker Trojans will continue to increase

Cyber-criminals will keep fine-tuning their social engineering skills to trick victims

More malware will be created for Windows 7 and Mac operating systems

The term ‘cyber war’ will become more familiar as politically-motivated attacks across the Internet increase

PandaLabs, Panda Security’s malware analysis and detection laboratory, has released its forecast of computer threat trends for 2010. PandaLabs predicts that in 2010, the amount of malware in circulation will continue to grow exponentially as it has in 2009. As anti-malware technologies are able to respond closer to real-time through cloud-based innovations such as Panda’s Collective Intelligence, malware creators will respond by generating even more diverse threats to evade detection and elimination. Once again malware will be designed almost exclusively for financial gain, and we can expect to see many new fake antivirus strains (rogueware), bots and banker Trojans.

Social Engineering Continues to Rise

Cyber-criminals will again be focusing on social engineering techniques to infect computers, particularly those targeting search engines (BlackHat SEO) and social networks, along with ‘drive-by-download’ infections from Web pages.

As the football World Cup takes place in South Africa, we can also expect to see significant amounts of malware related to this event: false ticket offers, junk mail, etc. It is always a good idea to be suspicious of any messages related with current affairs and large events such as this.

In the case of social networks, there have already been many examples of worms and Trojans targeting Twitter and Facebook. Malware creators will continue to be drawn to these types of platforms that are used by millions of people.

Watch Out Windows 7

Windows 7 will have a major impact on malware development: where Windows Vista hardly caused a ripple, Windows 7 will make waves. One of the main reasons is the widespread market acceptance of this new operating system, and since practically every new computer comes loaded with Windows 7 64-bit, criminals will be busy adapting malware to the new environment. It may take time, but we expect to see a major shift towards this platform over the next two years.

Mobile Phone Attacks – Not Yet!

Several security companies have been warning for some time that malware is soon to affect cell phones in much the same way as it affects PCs. Well, we hate to rain on their parade, but 2010 will not be the year of malware for cell phones.

The PC is a homogenous platform, with 90 percent of the world’s computers running Windows on Intel, meaning that any new Trojan, or worm has a potential victim pool of 90 percent of the world’s computers. The mobile phone environment is much more heterogeneous, with numerous vendors using different hardware and different operating systems.

Applications continue to be incompatible from one operating system to another. Therefore it is unlikely that 2010 will see widespread targeting of cell phones by malware. In any event, this year will witness many changes in the world of mobile telephony with more smartphones offering practically the same features as a PC; the emergence of Google Phone — the first phone sold directly by Google without tying users to specific operators; the increasing popularity of Android; and of course the iPhone. If in the next couple of years there are only two or three popular platforms, and if people make significantly more financial transactions from their phones, then the potential breeding ground for cyber-crime will be significant enough to be concerned.

Mac Becoming Increasingly Attractive to Cyber-Criminals

Mac’s market share has increased in recent years. Although the number of users has yet to reach the critical mass required to make it as profitable as PCs for cyber-criminals, it is nevertheless becoming more attractive. Mac is used just as PCs are to access social networks, email, and the Internet: the main malware distribution systems used by cyber-criminals. Consequently, Mac is no longer a safe haven against malware. These criminals can easily distinguish whether a system is Mac, and they are creating malware designed especially to target this OS. In 2009, we have already seen some attacks, and predict there are more to come in 2010.

Cyber war

Throughout 2009, governments around the world including the United States, the UK and Spain, have expressed concern about the potential for cyber-attacks to affect economies or critical infrastructure. We also saw this year how several Web pages in the United States and South Korea were the subject of attacks, with suspicion — as yet unapproved — pointing at North Korea. In 2010, we can expect to see similar politically-motivated attacks.

Securing the Cloud

Cloud-based services will continue to grow in popularity among consumers and business users alike. As this happens, the security industry must be acutely aware of cybercriminals’ moves to take advantage of this new platform.

Cloud Antivirus Technology on the Rise

2010 will be the year in which all anti-malware companies will innovate to remain competitive as cloud-based security becomes the most effective way to fight today’s malware. In 2007, Panda Security launched its first product which took advantage of the cloud. Now in 2009, all the company’s products use it and we have launched the first 100 percent cloud-based free antivirus: Panda Cloud Antivirus (www.cloudantivirus.com), and Panda has noticed that the rest of the marketplace is beginning to follow suit.

Source: Panda Security

Tags: , , , , , , , , , , , , , , , , , ,

Panda Security ranks the most dangerous computer threats of the last 20 years

September 13, 2009 · Filed Under Internet Software, Security Software, Software News · Comment 

Panda Security, the Cloud Security Company, announced that PandaLabs, the company’s laboratory for detecting and analyzing malware, has issued a ranking of the most dangerous threats to home and business users of the last 20 years. Coinciding with the 20th anniversary of the company, experts from PandaLabs wanted to research the most insidious malware threats that have surfaced in the past two decades.

The following threats have been selected for the notoriety they achieved through widespread epidemic and the damage caused:

– Friday 13 or Jerusalem: Created in Israel in 1988 and first reported in Jerusalem, this supposedly commemorated the 40th anniversary of Israel. Whenever the date was Friday 13, it would delete all programs run on an infected computer.
– Barrotes: The first well-known Spanish virus appeared in 1993. Once on the computer, it would remain hidden until January 5, when it would activate displaying just a series of bars on the monitor.
– Cascade or Falling Letters: Created in Germany in 1997, this virus would make the letters on the screen fall in a cascade whenever it infected a computer.
– CIH or Chernobyl: This virus was produced in Taiwan in 1998, and took just one week to propagate and infect thousands of computers.
– Melissa: First appeared on March 26, 1999 in the USA. This ultra-smart malicious code used social engineering to spread, with a message that read “Here is that document you asked for. . . don’t show anyone else ;-) ”
– ILoveYou or Loveletter: So famous, it hardly needs introduction. This romantic virus emerged from the Philippines in 2000. With the subject ‘ILoveYou’ it infected millions of computers around the world and even hit organizations like the Pentagon.
– Klez: Created in 2001 in Germany, it only infected computers on the 13th of odd months.
– Nimda: The name is basically ‘admin’ spelled backwards, as it was able to create administrator privileges on infected computers. It originated in China on September 18, 2001.
– SQLSlammer: This was another major headache for companies. It first appeared on January 25, 2003, and affected more than half a million servers in just a few days.
– Blaster: This virus, created in the USA on August 11, 2003, contained a message in its code: “I just want to say love you, San!!” (We still don’t know who ‘San’ is), and “Billy gates, why do you make this possible? Stop making money and fix your software”.
– Sobig: This German virus was famous in the summer of 2003. The F variant was the most damaging, it attacked on August 19 of the same year and generated more than 1 million copies of itself.
– Bagle: This emerged on January 18, 2004, and has been one of the most prolific viruses with respect to the number of variants.
– Netsky: This worm also came from Germany in 2004 and exploited vulnerabilities in Internet Explorer. Its creator was also responsible for the notorious Sasser virus.
– Conficker: Last on the list and most recent, it appeared in November 2008. Oddly enough, if your keyboard is configured in Ukrainian, it won’t affect you. . .

Source: Panda Security

Tags: , , , , , , , , , , , , , , , , , ,