Virus authors 'pack' malware to avoid detection

 

A variety of malware threats, rather than one specific virus, dominated the security landscape this February, according to security firm BitDefender..

However, the company said that all the threats in its Top 10 Malware List for February used the same packing method to obfuscate the payload.

"Virus writers use packers to decrease the size of the virus and to increase the cost of analysis," said Sorin Dudea, head of BitDefender AV Research.

"Unpacking something packed in an as-yet unknown manner takes a lot of time and skill."

Malware using this single packing method accounted for 37.02 percent of all detections in February.

The Peed/Storm Trojan dominated the list at 16.88 percent of total detections for the month. This was a strong resurgence given the Trojan's absence from the January list.

The proliferation of the Windows WMF vulnerability appeared to decrease during the month, as viruses using its signature accounted for only 5.33 percent of total detections.

Lower on the list are a host of much older mass mailer viruses, which Dudea described as "on their way to irrelevancy".

These viruses account for approximately six per cent of total detections, more than half of which are a result of Netsky.P.

"By this point, I think it is safe to say that Netsky.P is the most widespread mass mailer virus of all time," said Dudea.

Copyright ©v3.co.uk


Virus authors 'pack' malware to avoid detection
 
 
 
 
 
Top Stories
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Revealed: 2012 e-government award winners
Government highlights projects, professionals of the year.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  19%
 
No
  81%
TOTAL VOTES: 469

Vote