Security - CIOInsight
Home arrow Security arrow How Malware Spreads

Security Slideshow:
How Malware Spreads

By Ericka Chickowski on 2010-05-05


Like bacteria in a petri dish of warm sugar water, malware thrives in a computing environment full of unsecured P2P networking, remotely exploitable vulnerabilities, and free-flowing e-mail attachments. According to Symantec's recent Global Internet Security Threat Report, the following means of propagation are most popular amongst malicious hackers. Because hackers usually use more than one means of propagation, the percentages add up to over 100 percent.

LATEST STORIES

BLOGS
 
  • of
File-sharing Executables

Used in 72% of attacks

File-sharing Executables

Leveraged by viruses and worms to copy themselves onto removable media (e.g., thumb drives) and thence into machines, this was a favorite method of the Downadup.B virus.

Common Internet File System (CIFS) File Transfer

Used in 42% of attacks

Common Internet File System (CIFS) File Transfer

CIFS just passed e-mail as a means of propagation; allows hackers to spread infection to file servers and rapidly attack an enterprise network.

E-mail Attachment File Transfer

Used by 25% of attacks

E-mail Attachment File Transfer

With something like 90% of all email reported as spam, this remains a target-rich environment.

Remotely Exploitable Vulnerability

Used by 24% of attacks

Remotely Exploitable Vulnerability

Use of this vector doubled between 2008 and 2009, partially due to Downadup, which used this as another means to mushroom.

File sharing , P2P

Used by 5% of attacks

File sharing , P2P

The latest Taylor Swift MP3? No, malicious code. Save the Taylor Swift jokes, those are different things.

HTTP, Embedded URI, Instant Messenger

Used by 4% of attacks

HTTP, Embedded URI, Instant Messenger

Computers hosting public services and applications that use web and messaging apps are often untended, unpatched, and accessible to attackers

SQL

Used by 2% of attacks

SQL

Mass SQL injection attacks hit unprotected sites, then use them to commit drive-by downloads and efficiently infect thousands of machines.

  • More slideshows

FEATURED SPONSORED VIDEOS

FEATURED SPONSORED ARTICLES

Erasable E-Paper Saves Trees, Cuts Costs

Why Smart Companies Should Adopt the Lessons of Gaming

Interest in Mobile WiFi Hotspots Fuels New Solutions

A Closer Look at Public Cloud Security

View More Articles

  Brought to You By
Click Here



 

Advertisement

Sponsored Links
  • Try Windows Azure free for 90 days

  • Introducing the world's first family of systems with integrated expertise

  • FREE Securing Smartphones & Tablets for Dummies Book from Sophos
  • 77% of the Fortune 500 Manage Content Securely with Box.
  • Leverage your virtual computing environment with Dell.
  • Build an IT Infrastructure That Delivers the Future
  • 5 New Technologies That Will Change Enterprise ITAdvertisement
  • eWEEK Quick LInks

     
    Close this advertisement