Top 10 most dangerous malicious codes in February

British security firm Sophos has released a list of the Top 10 most dangerous malware in February. Accordingly, the first position belongs to a brand new name.

The name belongs to a completely new line of malicious code that has the ability to "change the look" constantly to deceive and bypass antivirus software.

" It's a completely new camouflage solution ," said Sophos senior technology consultant Graham Cluley. " This malicious code uses a face to attack users. But its appearance will immediately change if successful infection helps them to risk the page and avoid being detected ."

" So far we have discovered thousands of new variants of the Dref and Dorf malware streams. In fact, they are just a kind of malicious code but they have different faces ."

Malware programmers used a type of code called HckPk. This code can easily be found on the Internet. Just adding this code to their "work" has acquired the above dangerous appearance change feature.

" The hacker community is almost unaware of HckPk. The work of hackers is only to" pack "their products. Whenever it needs to be changed to bypass antivirus software, the hacker only needs to change. Little Italian source code HckPk is already able to create a completely new variant , "expert Cluely said.

Sophos' statistics show that the HckPk malware accounted for more than half of the malicious codes discovered in February. As the Dref and Dorf alone have 6,000 different variants in February. Next is the Deep Worm line with more than 1,500 variations. These deep lines are all using HackPk malware.

" Detecting this malicious code is a success for security vendors. This is a proof that security companies are increasingly proactive in fighting new malware. But besides the virus programmers. also growing and becoming more professional ".

Analysts said the HCPPk appeared around the end of 2006. However, at that time it did not "confirm its ability". Recently it started to emerge.

The remaining positions in the rankings still belong to familiar names like Netsky, Mytob, Nyxem .

Last month's email infection rate was still low, about one in 256 emails contained malicious code. In February, Sophos detected a total of 7,757 new malware.

No.

Malicious code

Ratio (%)

first

HckPk

50.3

2

Netsky

15.1

3

Mytob

12.5

4

Zafi

4.8

5

Sality

3.8

6

MyDoom

3.0

7

Bagle

2.4

8

Clagger

1.4

9

Nyxem

1.1

ten

StraDI

1.0

Other

4.6

Hoang Dung