Press Release

Sfogliate il nostro archivio stampa

01 nov 2005

Top ten viruses and hoaxes reported to Sophos in October 2005

Record quantities of new malware are reported by Sophos

Sophos, a world leader in protecting businesses against viruses, spyware and spam, has revealed the top ten viruses and hoaxes causing problems for businesses around the world during the month of October 2005.

The report, compiled from Sophos's global network of monitoring stations, reveals that October has seen the biggest increase in virus numbers since its records began - it now identifies and protects against a total of 112,142 viruses, which is an increase of 1,685 on last month. Netsky-P, the worm written by convicted German teenager Sven Jaschan, continues to head up the top ten twenty months after it was first detected. However, Mytob-GH, which first appeared on 16 October 2005, is already in second place and showing no sign of abating. This Mytob variant is well placed to topple Netsky-P from the top of the chart in November.

The top ten viruses in October were as follows:

Position Last
month
Malware Percentage of reports
11W32/Netsky-P
   17.2%
2NewW32/Mytob-GH
   8.1%
3NewW32/Mytob-EX
   5.7%
43W32/Mytob-AS
   5.4%
52W32/Mytob-BE
   5.3%
64W32/Zafi-D
   3.0%
75W32/Netsky-D
   2.5%
89W32/Mytob-C
   2.4%
9Re-entryW32/Zafi-B
   2.3%
10NewW32/Mytob-ER
   2.3%
Others 45.8%

September's lull in new viruses was short lived, with October's count totalling a record high of 1,685. Sophos experts have revealed that nearly two thirds of the viruses reported to Sophos during the month were versions of the Mytob worm, with the new Mytob-GH and Mytob-EX variants having made a significant impact.

"The unfortunate onslaught of new threats this month is unsurprising as malware authors ramp up their game in their pursuit of hard cash," said Carole Theriault, senior security consultant at Sophos. "The Mytob dynasty continues to grow - attacking networks thick and fast. Users should ensure that their anti-virus protection is regularly updated since this barrage of threats shows no sign of slowing down."

While Netsky-P no longer poses quite such a potent threat to proactive users, it is still at the top of the October chart for the fourth consecutive month, dropping slightly from 18.6% to 17.13% of viruses reported to Sophos.

This month's chart consists of only three virus families - Netsky, Mytob and Zafi, indicating that virus writers are continuing to create variants of established threats, which prove most effective for financial gain.

"There are six variants of the Mytob worm in the October chart, half of which are new entries," continued Theriault. "The creators of Mytob appear to be a gang of virus writers called Hellbot. By having several gang members they can easily issue several different variants in a short space of time."

With this rise in viruses, Sophos's research shows that 1.66%, or one in 60 emails, circulating in October were viral.

In order to minimise exposure to viruses, Sophos recommends that companies deploy a policy at their email gateway which blocks unwanted executable attachments from being sent into their organisation from the outside world. Companies should also run up-to-date anti-virus software, firewalls and install the latest security patches.

The top ten hoaxes reported to Sophos during October 2005 were as follows:

Position Hoax Percentage of reports
1Hotmail hoax
   17.5%
2Meninas da Playboy
   10.9%
3HIV Needles
   8.8%
4Bonsai kitten
   8.4%
5Budweiser frogs screensaver
   6.6%
6A virtual card for you
   5.5%
7Bill Gates fortune
   4.1%
8WTC Survivor
   3.0%
9Jamie Bulger
   2.8%
10Sainsbury's gift vouchers
   1.5%
Others30.9%

"The hoax chart has remained fairly static this month, although the HIV Needles hoax has leapt up to number three," said Theriault. "These sick individuals obviously get a kick out of terrifying the general public, and the speed with which this hoax has circulated highlights this genuine fear factor. The Sainsbury's Gift Vouchers hoax, although not as malicious as the HIV hoax, is still a cruel trick that plays on the hopes of shoppers."

Sophos has made available a free, constantly updated information feed for intranets and websites which means users can always find out about the latest viruses and hoaxes.

Graphics of the above top ten virus chart are also available.

Informazioni su Sophos

Più di 100 milioni di utenti in 150 paesi si affidano a Sophos, considerandola la migliore protezione contro minacce complesse e perdita di dati. Sophos si impegna a fornire soluzioni di sicurezza completa facili da distribuire, gestire e utilizzare, aventi i più bassi costi di proprietà del settore. Sophos offre soluzioni all'avanguardia per cifratura, sicurezza degli endpoint, Web, e-mail, dispositivi mobili e protezione della rete, grazie al supporto dei SophosLabs: la nostra rete mondiale di centri di prevenzione delle minacce.

Le sedi centrali di Sophos sono situate a Boston, USA, e ad Oxford, Regno Unito. Maggiori informazioni sono disponibili sul sito web www.sophos.com.