Support
Jobs in Symantec
Email & Web Security Services
About Symantec
10 September 2010, 21:24 UTC(GMT)

SoftScans predictions for 2009

Printvenlig version

More web based malware, scareware and Social Engineering

In 2009 we will see a continued increase in the use of Social Engineering to distribute malware and scareware. The malicious software will be more complex and its targeting will not just be limited to normal users, but also experienced IT administrators.

Social Engineering - they steal your identity
A year ago SoftScan predicted that Social Engineering - the art of luring personal information from users on the internet, would be even more advanced in 2008. Judging by the development of malware within social networking sites such as Facebook, MySpace and Twitter, the cyber criminals have clearly been focused on exploiting the users trust in communications from known services and other users.

Example: A user receives an email with a link to an update, e.g. on Facebook. The link leads to a fake Facebook page, looking just like the original, but which in reality is a page designed to grab the user's login and password. The information is then used to login to the service and under false identity send emails to the users Facebook friends.

The friends will without further consideration open the mail and click on the link leading to a website with a funny video clip. But to see the video, you have to install a plug-in for the browser. But instead of a useful plug-in, the friends' computers are now being infected with the virus-worm Koobface, which then sends out spam to their friends.

Mobile phones can be next
SoftScan expects 2009 to offer even more of the same, targeting large social network sites to distribute malware. With a growing number of people using their mobile phone to access these sites to update their profile etc, attacks on mobile phone attacks are predicted to materialise on a greater scale in 2009.

Explosive increase in malware and scareware
As expected, malware on popular websites with content and links from different sources became a problem in 2008. In just the first half of the year, web based malware increased with 278%, and the increase continued to grow for the rest of 2008. SoftScan expects the explosive growth to continue in 2009, and advises that users need to be even more alert to their own internet behavior.

SoftScan also expects a continued rise in the use of scareware, where the user is tricked to run a false security update, which is in reality a virus. Besides the rise in the attacks, there will also be a development towards more complicated scareware targeted to hit experienced IT administrator, e.g. a message for removing viruses on the network, nice and easily.

Spam volumes going up again
SoftScan also predicted that the amount of spam would drop marginally during the first half of 2008, only to rise again later in the year. The spam amount did drop marginally in the first halfyear, but the rise was absent. Actually, spam dropped remarkably with the takedown of the world largest botnet*, which included the american company McColo Corp., at the end of 2008. SoftScan registered a drop in spam by a third after closing of the McColo network.

In 2009, SoftScan expects spam to rise slightly once again, as spammers regain their strength. The economic incitement to continue with their spam crime is sufficient to take the risk.

We help you cope with the problems
With these predictions in mind, we at SoftScan are always working to improve and develop our products and services, to stem and minimize the risk of attacks on your systems. If you want hear more about what we do to help you, or have a chat about your internet security, you are most welcome to contact us.


 


* A botnet is a network of computers, which run autonomously, but is controlled by cyber-criminals. The cyber-criminals typically gains control by spreading a virus to computers without the owner's knowledge. The criminals use the botnets to send out spam or to flood companies with emails or enquiries which make the companies systems break down.