Virus count drops in e-mail, Sophos says

The ratio of e-mails containing a virus has fallen for the first six months this year compared to the same period last year, said Sophos PLC.

The proportion of e-mail messages that contain malware has fallen for the first six months this year compared to the same period last year, Sophos said on Wednesday.

Statistics released by Sophos show that about one in 91 e-mail messages contained a virus or other types of bad software, far less than the 1-in-35 figure of a year ago, said Graham Cluley, senior technology consultant. Sophos provides enterprise-level antivirus, spam, adware and malware protection products.

"E-mail, as far as viruses are concerned, is actually safer than it was last year," Cluley said.

While the news is welcome, the bad guys haven't given up. Instead, their tactics are changing to avoid detection, and they're writing different kinds of bad software, Cluley said.

Malware writers are increasing their focus on Trojan horse programs, a class of malicious software that can include programs called keyloggers. Keyloggers send user log-ins and passwords to a server controlled by a hacker. The programs can also harvest credit card numbers and other personal data that could be used in an identity theft scheme.

Trojan horse programs, unlike viruses, do not replicate themselves. About 81 percent of the new bad software Sophos sees circulated on the Internet are these kinds of programs.

"It's a big financial push," Cluley said.

Criminals are also taking a lower profile in their spam campaigns. When masses of virus- or Trojan-laden e-mail are sent out, antivirus companies such as Sophos receive samples and quickly update their client software.

The attack's effectiveness is thus hampered, so malware writers are sending out fewer large batches of e-mail and targeting victims more carefully, Cluley said.

Many aging pieces of malware code are still drifting around the Internet in large numbers, Sophos' Top 10 list of malware shows. One reason is laziness on the part of hackers, who don't want to write new code, Cluley said.

A second reason is that many consumer computers lack antivirus software, making them ripe targets even though most antivirus programs could protect them.

"Home users are much more laid back about virus protection," Cluley said.

The No. 2 and No. 3 most common pieces of malware, Netsky-P and Zafi-B respectively, have been around for a couple of years, Cluley said. Both are both mass-mail worms. A worm, like other viruses, is a program that replicates, but does not infect other files.

The most common malware so far for 2006 is Sober-Z, a worm that was active only for the first six days of 2006. The worm, contained in e-mail purportedly from the U.S. Federal Bureau of Investigation or Central Intelligence Agency and claimed a user had visited illegal Web sites, was programmed to stop replicating after Jan. 6.

But in that short time it spread in such quantities that it still holds the No. 1 spot, appearing in some 22.4 percent of viral e-mail, Cluley said.

Four variations of the Mytob virus hold slots on Sophos' top 10 list. Variants of Mytob can turn off antivirus software, forge the sender's e-mail address, download other malicious code from the Internet plus modify and steal data on computers.

In a separate list classifying malware by families, Mytob came in first, appearing in some 28.7 percent of viral e-mail.

Nyxem-D, a much discussed worm that was also called MyWife, Blackmal and Kama Sutra, came in fourth, although it did not cause much damage.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?