Top 10 malware list
BitDefender, a global provider of antivirus software and data security solutions, has announced that malware packers gained even more popularity in the month of April, as three of the positions on BitDefender’s April 2008 Top Ten Malware list are occupied with malware packed by such software.
According to BitDefender Labs, the three are all packed with the same type of packer (NSAnti) which has caused problems in previous months.
"It seems repacking malware to attempt avoiding detection, rather than spending time and energy writing new viruses from scratch, is a technique that is here to stay," says Sorin Dudea, head of BitDefender AV Research.
Straightforward packers are not the only tools used for this purpose. The fourth position on the list is a sophisticated malware loader, dubbed by BitDefender researchers as ’Loader.N’. Loader.N runs decrypts and enables two other packed pieces of malware (a Trojan, Kobcka and a Trojan, Downloader.Agent) which transforms the infected machine into a spam relay.
"The loader serves two purposes: the encryption prevents antivirus software from detecting the payload in transit, while the unpacking and loading part ensures that at no point does the payload get written to disk – eliminating another inception point," Dudea explains. "Of course, the exercise is pointless, as we can still detect the decryptor itself."
The rest of the top ten is, yet again, pretty well-populated with mass mailer viruses, with the Cutwail Trojan, another tool turning machines into spam bots, appearing in the 6th position.
The list includes:
- Packer – Malware. NSAnti.AD – 33,71%
- Win32 – Netsky. P@mm – 7,48%
- Win32 – Worm. Sohanad.NAW – 4,56%
- Packer – Malware. NSAnti.AG – 2,86%
- Trojan – Loader.N – 2,25%
- Trojan – Dropper. Cutwail.F – 2,04%
- Win32 – Netsky. AA@mm – 1,98%
- Win32 – NetSky. D@mm – 1,98%
- Packer – Malware. NSAnti.Z – 1,87%
- Win32 – Nyxem. E@mm – 1,65%
- Others – 39,62%
Loading ...