Fall Malware Threats 2012

Latest release of Fall Malware for 2012 from seCURE Connexion

The goal in releasing a comprised list of threats that security companies will be dealing with the most this Fall is to help instruct users on the latest vectors, so that they know how important it is to maintain an updated antivirus program.

Most of the malware threats listed below are audience aggregated, which means what most security companies are dealing with currently, and there is no hope of it ending anytime soon. These are in order of the most distributed.

KEY: Vir=Virus, Rtk=Rootkit, Trj=Trojan, WM=Worm, Adw=Adware, Spy=Spyware

1. Trj.ZeroAccess(Sirefef)
   • FAQ: How did Sirefef or ZeroAccess Infect You?
   • See Microsoft’s writeup
   • Outlook: Seems as though it still is a problem with rebooting PCs after giving it one-minute notice. It will continue throughout the Fall of being a problem.
2. Trj.Agent
   • The Agent trojan is a backdoor proxy trojan, that attempts to change the proxy on the target computer to help redirect search results and browsing activity in attempts to mine money or bitcoins.
   • Outlook: Seems this trojan is the most updated trojan ever seen, and will continue to be a problem with all of its low-to-medium risk threats.
3. Vir.Sality
   • See Microsoft’s writeup
   • Outlook: Sality has been a problem for a few years now, and it still will be a problem. It infects almost every user/system file on the operating system.
4. Rtk.TDL4/TDSS
   • See Microsoft’s writeup
   • Outlook: TDL4 has continued to be a problem and will continue to be a problem as long as computers have a working master boot record.
5. Adw.FakeAV
   • See Microsoft’s writeup
   • Outlook: Fake or rogue antivirus has been a problem for over four years of scamming users in to buying antivirus software. It will continue to be a problem for at least the next six months to a year.

Get best protection now:

Recommended reading:

• Second Opinion Malware Scanners: Why buy one? (secureconnexion.wordpress.com)
• FAQ: How did Sirefef or ZeroAccess Infect You? (secureconnexion.wordpress.com)
• New Java vulnerabilities found just after release of recent update (secureconnexion.wordpress.com)
• New TDL4 variant affecting government, ISPs, etc. (secureconnexion.wordpress.com)
• Modern Malware and the Balance Between IDS and IPS (thethreatvector.wordpress.com)