Tuesday, September 15, 2009

I'm too busy with security events ...

I will be giving a presentation tomorrow at IDG's in-the-cloud event (Netherlands). Next week I will be in Geneva, Switzerland for my 14th Virus Bulletin conference. This time I will be sponsored by EICAR and I will bring the CFP and the News magazine from EICAR with me. After this I will give a lecture at the CBM masterclass event (Netherlands, 30 September) and the day afterwards I will give another lecture at Nemesys also in the Netherlands... And that's only the beginning. And I'm missing a lot of other events, I just have no time to visit them all. Maybe I should try to split me up in 2 or 3 or maybe a virtual copy of myself. Well that's a future thingy isn't it. Just keep an eye on my Twitter space where you can find some more info, if I have the time for it.
Let's hope I don't forget my birthday in meantime... ;-)

Friday, September 04, 2009

10 Most Known Malware in 2 Decades (Random Order)

a) Conficker (2008-2009) -- Also known as Downup, Downadup and Kido, is a computer worm targeting the Microsoft Windows operating system that was first detected in November 2008. It uses flaws in Windows software to co-opt machines and link them into a virtual computer that can be commanded remotely by its authors. Conficker has more than five million computers now under its control — government, business and home computers in more than 200 countries, according to the New York Times. The worm uses a combination of advanced malware techniques which has made it difficult to counter, and has since spread rapidly into what is now believed to be the largest computer worm infection since the 2003 SQL Slammer.
b) I Love You (2000) -- Who wouldn't open an e-mail with "I Love You" in the subject line? Well, that was the problem. By May 2000, 50 million infections of this worm had been reported. The Pentagon, the CIA, and the British Parliament all had to shut down their e-mail systems in order to purge the threat. I still remember that I was on a customers site when it all started and I was overloaded with press and media attention afterwards.
c) Melissa (1999) -- Melissa was an exotic dancer, and David L. Smith was obsessed with her and also with writing viruses. The virus he named after Melissa and released to the world on March 26, 1999, kicked off a period of high-profile threats that rocked the Internet between 1999 and 2005.
d) SQL Slammer (2003) -- This fast-moving worm managed to temporarily bring much of the Internet to its knees in January 2003. The threat was so aggressive that it was mistaken by some countries to be an organized attack against them. I was just ordering a fish in a fish-shop that day however I didn't got the time to eat it afterwards ....
e) Nimda (2001) -- A mass-mailing worm that uses multiple methods to spread itself, within 22 minutes, Nimda became the Internet's most widespread worm. The name of the virus came from the reversed spelling of "admin."
f) Code Red (2001) -- Web sites affected by the Code Red worm were defaced by the phrase "Hacked By Chinese!" At its peak, the number of infected hosts reached 359,000.
g) Blaster (2003) -- Blaster is a worm that triggered a payload that launched a denial of service attack against windowsupdate.com, which included the message, "billy gates why do you make this possible? Stop making money and fix your software!!"
h) Sasser (2004) -- This nasty worm spread by exploiting a vulnerable network port, meaning that it could spread without user intervention. Sasser wreaked havoc on everything from The British Coast Guard to Delta Airlines, which had to cancel some flights after its computers became infected.
i) Storm (2007) -- Poor Microsoft, always the popular target. Like Blaster and others before, this worm's payload performed a denial-of-service attack on www.microsoft.com. During Symantec's tests an infected machine was observed sending a burst of almost 1,800 e-mails in a five-minute period.
j) Morris (1988) -- A real oldie: without Morris the current threat "superstars" wouldn't exist. The Morris worm (or Internet worm) was created with innocent intentions. Robert Morris claims that he wrote the worm in an effort to gauge the size of the Internet. Unfortunately, the worm contained an error that caused it to infect computers multiple times, creating a denial of service.

I used the most common known malware names over here and not particular specific Kaspersky Lab or other security vendors names.