Kaspersky Lab – China Hosts Highest Malware Laden Websites

According to Kaspersky Lab's Malware Miscellany Report for September 2009, China attained the top slot among the top 3 countries hosting websites that spread malware by having 26% of all these (malware hosting) website, followed by US (18%) and Russia (12%).

The report also reveals the top 3 nations for malicious URLs, which include - Canada (21%), the US (16%) and China (15%).

Famous Chinese porn website www.langlangdor.com infected the highest number of online users by contributing 1.62% of total internet infection worldwide.

According to the company, porn websites always attract web users and cyber criminals often place their malicious content or malware on these websites. There had been attempts (which were later blocked) of spreading a wide range of trojans from this website. Most of them belonged to either of two families - Trojan.Win32.StartPage and Trojan-Downloader.Win32.Agent.

Furthermore, www.gddsz.store.gg.com was sworn on as the site that had spread the highest number of unique malware owing to its contribution of 1142 unique malicious programs.

Kaspersky stated that these programs vary widely and covered nearly all types of malicious behavior identified by Kaspersky Lab.

According to the report, Packed.Win32.TDSS.z was the most widespread malware on the Internet in a month. It proliferated to computers in 108 countries worldwide.

Trojan.Win32.Chifrax.d was the biggest malware program that led category in September 2009 at 388 MB. There are several variants of this Trojan; all larger than 300 MB. Trojan.Win32.Chifrax.d was the name utilized to detect CAB archives. These archives had been modified by malware writers to escape antivirus solutions.

Kaspersky also revealed the smallest malware for the month of September 2009 Trojan.BAT.Shutdown.ab (merely 30 bytes) and it was part of another Trojan that used it to shut down victim computer without user's consent.

According to the report, it was found in late July 2009 that Adobe Flash Players 9 and 10 had several vulnerabilities which could be exported by cyber criminals to access a system and run arbitrary code, bypass security systems and gain access to private details. Kaspersky claimed that this was the most widespread vulnerability on users' computers.

Related article: Kaspersky Released Malware Statistics for September 2008

» SPAMfighter News - 11/3/2009