GFI Software Reports Continued Malware Infections, Highlights Recent Phishing Attacks for June 2011

CLEARWATER, Fla.--()--GFI® Software today announced the top 10 most prevalent malware threats for June 2011. Highlights for the month included continued phishing attacks, notably one affecting microblogging site Tumblr, which compromised up to 8,000 user accounts, making it one of the most successful phishing attacks of its kind. Additionally, June saw scammers distributing rogue antivirus software by taking advantage of search traffic related to popular Pokemon™ video games, as well as luring users to fill out seemingly endless fake questionnaires.

“The Tumblr phishing and spam attacks highlight the importance of building greater awareness about online threats and simple tactics we can all use to defend ourselves,” said Chris Boyd, senior threat researcher at GFI Software. “Some of the attacks we saw in June were aimed at compromising social networking login credentials knowing that many people still use the same username and password for all their online activities, including banking, shopping and email. It is important for users on any social networking site to approach content that looks out of place with care since, as seen on Tumblr, seemingly innocuous attacks can evolve into more serious threats. Also, strengthen your passwords and vary them across all your online accounts to limit your risk and exposure if one is compromised.”

Phishing scams have become increasingly common on social networking sites as scammers have become savvier and bolder in their attacks. In recent months, scammers have used surveys, competitions and the promise of adult content to entice Internet users into divulging their personal information.

GFI also explored the risk of reputation hijacking through legitimate cloud services like Google Docs. The company found a large number of phishing sites using Google Spreadsheets to steal credentials of unsuspecting users.

June also brought some positive news in the fight against online scammers. The U.S. Department of Justice and the FBI announced that they had cracked an international cybercrime ring believed to have scammed more than $72 million through scareware sales. As part of Operation Trident Tribunal, the FBI seized computers, servers and bank accounts in a series of raids.

As the summer months continue to roll on, Internet users should be wary of topical threats, which are potential targets for fake antivirus attacks, SEO poisoning and survey scams. These may include the final Harry Potter film and increasing interest in recently announced Republican presidential candidates.

Top 10 Malware Detections for June

GFI’s top 10 malware list is compiled from collected scan data of tens of thousands of GFI VIPRE® Antivirus customers who are part of GFI’s ThreatNet™ automated threat tracking system. ThreatNet statistics revealed that the vast majority of malware threats found continue to be Trojans, mostly detected in generic form, and that a higher than average number of adware threats propagated during June.

Detection

   

Type

   

Percent

Trojan.Win32.Generic Trojan 29.78
Zugo Ltd (v) Misc (General) 2.37
INF.Autorun (v) Trojan 1.59
Exploit.PDF-JS.Gen (v) Exploit 1.41
Trojan.Win32.Jpgiframe (v) Trojan 1.39
Trojan.JS.Redirector.cd (v) Trojan 1.32
Trojan-Spy.Win32.Zbot.gen Trojan 1.20
Pinball Corporation. (v) Adware (General) 1.13
Adware.Win32.Gen Adware (General) 1.12
GameVance Adware (General) 1.07

About GFI Labs

GFI Labs specialises in the discovery and analysis of dangerous vulnerabilities and malware that could be exploited for Internet and email attacks. The research team actively researches new malware outbreaks, creating and testing new threat definitions on a constant basis.

About GFI

GFI Software provides web and mail security, archiving, backup and fax, networking and security software and hosted IT solutions for small to medium-sized businesses (SMBs) via an extensive global partner community. GFI products are available either as on-premise solutions, in the cloud or as a hybrid of both delivery models. With award-winning technology, a competitive pricing strategy, and a strong focus on the unique requirements of SMBs, GFI satisfies the IT needs of organisations on a global scale. The company has offices in the United States, United Kingdom, Austria, Australia, Malta, Hong Kong, Philippines and Romania, which together support hundreds of thousands of installations worldwide. GFI is a channel-focused company with thousands of partners throughout the world and is also a Microsoft Gold Certified Partner.

Copyright © 2011 GFI Software. All rights reserved. All trademarks used are owned by their respective companies. To the best of our knowledge, all details were correct at the time of publishing; this information is subject to change without notice

Contacts

GFI Software
Please email David Kelleher on dkelleher@gfi.com
GFI - Malta: Tel: +356 2205 2000; Cell: +356 7906 3606; Fax: +356 21382419
URL: http://www.gfi.com
or
Davies Murphy Group
Please email Brian Alberti on gfi@daviesmurphy.com
Tel: 781-418-2403
URL: http://www.daviesmurphy.com

Release Summary

GFI Software reports that the month of June 2011 was rife with new rogue antivirus threats and phishing attacks, most notably against microblogging site Tumblr.

Contacts

GFI Software
Please email David Kelleher on dkelleher@gfi.com
GFI - Malta: Tel: +356 2205 2000; Cell: +356 7906 3606; Fax: +356 21382419
URL: http://www.gfi.com
or
Davies Murphy Group
Please email Brian Alberti on gfi@daviesmurphy.com
Tel: 781-418-2403
URL: http://www.daviesmurphy.com