|
06 July 2010 ,
Written by Dhruv Tanwar
|
|
Kaspersky Lab has published its Monthly Malware Statistics for June 2010, with some unexpected malware making the list.
Trojan-Downloader.JS.Pegel.b made a surprising comeback to the Top 20 list of malware detected on the Internet, says Kaspersky. This script downloader,  designed to infect legitimate websites, returned to the list in third place after a period of relative obscurity. When a user visits an infected page, Pegel redirects them to a site controlled by a cybercriminal, which in turn surreptitiously downloads various malicious programs to the victim’s computer. Pegel.b makes use of a variety of PDF exploits and the Java CVE-2010-0886 exploit.
Kaspersky found the presence of the Exploit.JS.Pdfka family in its rating as no surprise. It said that the release of every new update from Adobe is now accompanied by several variants of this exploit, which inevitably make it to the Top 20 list of malicious programs. In June alone, three variants of Exploit.JS.Pdfka entered the list of Internet-borne malware at sixth, eighth and fourteenth places.
Six exploits made it to this Top 20 list in June, as users remain relatively blasé about regular security updates issued by software vendors, leaving their computers vulnerable to malicious attacks, Kaspersky said, citing the second place ranking of Agent.bab as a case in point. It uses the CVE-2010-0806 Windows vulnerability, detected back in March of this year, to download different malicious programs to users’ computers. In June the number of individual attempts to download this piece of malware from websites exceeded 340,000, Kaspersky said.
For the majority of cybercriminals, confidential data offers rich pickings and a new variant of the popular P2P-Worm.Palevo in eleventh place actively seeks out any confidential data entered into a user’s browser window. Peer-to-Peer file sharing using programs such as BearShare, iMesh, Shareaza and eMule is one of the main methods by which this worm propagates, making multiple copies of itself in folders used to store files that are commonly downloaded and uploaded, giving catchy names to those copies in the hope that they will attract the attention of potential victims. Other means of propagation for this P2P-Worm.Win32.Palevo.fuc include multiple copying to network folders and other network resources, sending links via instant messengers and by teaming up with Trojan.Win32.Autorun to infect any kind of removable device that it may come into contact with.
Potentially unwanted software that gathers user data also made it into Kaspersky's list of malware detected on the Internet. The raison d’être of AdWare.Win32.FunWeb.ds in twelfth place is to gather data about users’ search requests and more often than not, this data is then used by a system for displaying the banners that frequently pop up during online surfing sessions. |