• On TechRepublic: 10 lame phrases to cut from your resume
July 29, 2009 11:02 AM PDT

Report: Spam and malware at all-time highs

by Lance Whitney
  • Font size
  • Print
  • 15 comments

Spam and botnets have hit their highest levels ever, according to McAfee's second-quarter Threats Report, released Wednesday. McAfee's Avert Labs says spam recorded in the second quarter shot up 80 percent compared with the first quarter of the year.

This follows a brief reprieve from spam following last year's shutdown of the McColo ISP. June alone saw the largest amount of spam recorded by McAfee, surpassing the previous monthly high in October by more than 20 percent. McAfee now estimates that spam accounts for 92 percent of all e-mail.

By country, the amount of worldwide spam originating from the United States has dropped steadily over the past three quarters, but the U.S. still leads in spam production at 25.5 percent of the global market. Brazil, Turkey, India, and Poland have also seen sizable increases at producing spam.

Zombies and botnets are on the rise, said the report, indicating that more computers are being hijacked to send spam and malware. McAfee recorded almost 14 million new zombies in action over the second quarter, a rise of more than 150,000 new zombies each day, another record.

Zombies and botnets can thank all the unprotected home computers, notes McAfee. More home users are setting up their PCs as remote access machines and as Web hosts, leaving those PCs increasingly vulnerable.

Another major threat reported by McAfee is AutoRun malware, which is triggered automatically when a person plugs in a USB stick, memory card, or other external device. The Trojans PWS-OnlineGames and PWS-Gamania and two viruses named W32/Sality and W32/Virut have propagated through removable cards and drives.

McAfee said it uncovered AutoRun malware in more than 27 million infected files during one 30-day period alone this past quarter, earning it the No. 1 spot of all malware detected worldwide.

"The jump in bot and spam activity we saw in the last three months is alarming, and the threat from AutoRun malware continues to grow," said Mike Gallagher, senior vice president and chief technology officer of McAfee Avert Labs.

Social-networking sites are another popular target for cybercriminals, noted the report. The openness of social networks often puts them at risk.

On Facebook, people freely access different applications that require a username and password, so those apps can easily tap into their accounts. McAfee also saw an increase this past quarter in the "popular" Facebook malware Koobface.

Twitter too has seen its share of threats. In April, the site was hit by a JavaScript worm that exploited a hole to infect user profiles. The same month, a French hacker was able to gain access to the account of a Twitter product director.

The use of sites like TinyURL by tweeters to shorten a lengthy URL can also pose a problem, said McAfee. Users have no idea what Web site the TinyURL redirects to until it actually opens.

McAfee releases its Threats Report each quarter. The first-quarter report was published in May.

Lance Whitney wears a few different technology hats--journalist, Web developer, and software trainer. He's a contributing editor for Microsoft TechNet Magazine and writes for other computer publications and Web sites. You can follow Lance on Twitter at @lancewhit. Lance is a member of the CNET Blog Network, and he is not an employee of CNET.
Recent posts from Security
Kingston flash drives suffer password flaw
Q&A: Researcher Karsten Nohl on mobile eavesdropping
RockYou sued over data breach
Hacker Gonzalez pleads guilty in Heartland breach
Microsoft rebuts IIS vulnerability claims
More attacks expected on Facebook, Twitter in 2010
GSM crypto code cracked, engineer says
Web-based Lookout protects mobile devices, data
Add a Comment (Log in or register) (15 Comments)
  • prev
  • 1
  • next
by SactoGuy018 July 29, 2009 11:30 AM PDT
This is why one of the smartest moves Microsoft ever did was starting with Windows XP Service Pack 2, you had to install at least both an antivirus program and a firewall program to keep out these threats, along with at least mandatory reminders of operating system updates from the Windows Update website. That's why most new Windows-based computers since the Windows XP SP2 have Norton, McAfee, Trend Micro, Panda Software, Kaspersky, etc. security suites installed, which not only provide malware protection and advanced firewalls but also nowdays offer spam mail handling in Outlook Expresss/Outlook/Microsoft Mail and also anti-phishing protection, too.

My HP Pavilion a6400f desktop computer has Norton Internet Security 2009 installed, and it's not likely I will get a malware attack or be directed to a phishing website.
Reply to this comment
by BogusBasin July 29, 2009 11:33 AM PDT
Ahhh Haaa Haaaa Hooooo haaaaa!!!!!

Sounds really fun! Enjoy!

Amen
by The_happy_switcher July 29, 2009 11:39 AM PDT
And Norton thanks you for your contribution, as well. Have you ever asked yourself why you put up with all this nonsense AND have to pay to keep it off your OS when it should be Microsoft's job? Just curious.
by BK216 July 29, 2009 11:51 AM PDT
ummm

the reason PCs come pre-installed with Antivirus software isn't for security, its for securing paid subscriptions to the particular security software company that's installed. OEMs dont pay security companies for the software, security companies pay OEMs to place the software on their systems.

MS includes Defender on any Vista/7 PC for the purpose of security (soon MSE i hope), anything else that's preinstalled is for $$
by catchall July 29, 2009 11:58 AM PDT
@The_happy_switcher
because it is still far, far better then the alternatives.
Kind of shows how pathetic the competition is when jumping through a few hoops is still so much better.
by BogusBasin July 29, 2009 12:02 PM PDT
Ignorance is bliss I guess..............

Amen
by The_happy_switcher July 29, 2009 2:43 PM PDT
@catchall: You call it jumping through hoops. That may be fine for Poindexters but the average American doesn't know his ass from a hole in the ground much less how to fully protect their PC which is why Windows viruses/trojans spread like wildfire.
by SactoGuy018 July 29, 2009 2:58 PM PDT
I just find it disappointing that while everyone is trying to dismiss my comments, my computer at home has not gotten anything close to malware or being directed to a known phishing site, especially given Norton Internet Security 2008 (and now 2009) being automatically updated and vigilant for known malware attacks every time I turn on my computer.

People may say a Mac is safer, but once somebody figures out how to start a large-scale malware attack directed specifically at Macs they will change their mind in no time flat.
by SlimGem July 29, 2009 3:45 PM PDT
"People may say a Mac is safer, but once somebody figures out how to start a large-scale malware attack directed specifically at Macs they will change their mind in no time flat."

Feel free to castigate us when that day finally comes. In the mean time ...
by kyle5434 July 29, 2009 11:42 AM PDT
All the more reason I use PCLinuxOS, and set the rest of my family up on it as well. They don't notice the difference between it and using Windows, and I don't have to be worried about them getting infected (and me having to clean up the mess).

On the rare occasion I need a Windows app, it's easy enough for me to fire up in a VM.
Reply to this comment
by pcampagna July 29, 2009 12:18 PM PDT
PC SUCKS! I hate all the crap ware you get on them and it's just that crap ware. Buy a mac, get norton and forget about it. 8 years ruinning without worrying about Malware, spyware and getting tons of work done because of it.

My work PC is constantly having problems. I HATE IT!!! Update this, update that.... If ou think for one second that the programs that come "pre-installed " are for your benefit, you're smoking something.
Reply to this comment
by BogusBasin July 29, 2009 12:33 PM PDT
But they're cheaper and everyone else is using them. They must be better right? Right?!

Amen
by SlimGem July 29, 2009 3:54 PM PDT
The crapware is the fault of the PC vendor. Microsoft normally only has a monthly update. As a Mac and PC user I can agree with some of your sentiments, but as for updates I have to say that Apple has a heck of a lot more than MS does. Whether necessary or not I sometimes find it irritating since I won't install one until I do a fresh backup.
by July 29, 2009 12:50 PM PDT
"Twitter too has seen its share of threats. In April, the site was hit by a JavaScript worm that exploited a hole to infect user profiles. The same month, a French hacker was able to gain access to the account of a Twitter product director.

The use of sites like TinyURL by tweeters to shorten a lengthy URL can also pose a problem, said McAfee."
BUT.........
"You can follow Lance on Twitter at @lancewhit"
What to do? What to do?

Anybody blocking Twitter on their network?
Reply to this comment
by SergeM256 July 29, 2009 7:00 PM PDT
I don't have any problem with viruses and malware, last time I saw virus in 1992. I don't use any antivirus software - I am not going to pay for subscription and antivirus software only slows PC and gives false alarms occasionally. I don't visit porn sites, I don't click Yes on any message box that pops up, I don't open attachments. I have firewall and security settings configured appropriately, and other common sense precautions.
99% of viruses and malvare is a result of a user doing something stupid.
Reply to this comment
(15 Comments)
  • prev
  • 1
  • next
advertisement

Five New Year's resolutions for Google

Stakes are as Google attempts to maintain one of the Internet's greatest cash machines while pushing into new and risky markets.
• Android event set for Jan. 5

For eBay sellers, a holiday hamster hangover

The gift frenzy over Zhu Zhu Pets leaves some power sellers feeling like they've just run a marathon--but the steep price tags lead to some impressive profits.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right