The Storm winds down, but new malware on the up
Malicious software removal tools have cut down Storm botnet numbers, but does this simply mean that criminals will migrate to new threats?
The Storm has dramatically calmed this April, with a MessageLabs report claiming that the Storm botnet was now only at five per cent of its original size.
Storm had been estimated at having compromised two million computers, but there was a 57 per cent decrease in malware-laden emails distributed by the Storm botnet during April.
MessageLabs suggested that the introduction of new malicious software tools which aimed to target and remove Storm infections may have been responsible. Microsoft's Malicious Software Removal Tool had recently been updated for this purpose.
But it wasn't all good news, as the same report said that web-based malware had increased by 23 per cent, with cyber criminals taking advantage of users unfamiliar with the web threat.
Analysis showed that 36.1 per cent of interceptions in April were new, with an average or 1,214 new websites per day harbouring malware, spyware or adware. This was an increase of 619 per day compared to March.
"April was a month of unpredictability with the mighty Storm botnet losing all but five per cent of its anonymous army and web-based malware reaching new levels," said Mark Sunner, chief security analyst at MessageLabs.
The report said that a new botnet called Srizbi, which showed up in 2007, had the potential to overtake Storm as the most notorious botnet.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
Of the new threats, Sunner said: "This month we find ourselves fighting the cybercrime battle on many fronts, with the bad guys using an arsenal of weapons in order to detonate spam, viruses, phishing attacks and targeted Trojans."
In the week of the 30th anniversary of the first spam message, MessageLabs also reported on a new spamming technique which was being used to send authenticated spam email through Yahoo SMTP servers.
It accounted for one per cent of all spam intercepted in April, advertising services for Canadian Pharmacy, which the company said were well known for spamming.
It used the SMTP server and a DomainKeys Identified Mail (DKIM) authentication technique which ensured that the email was harder to block.
-
SecurityHQ names Aaron Hambleton as product and services chiefNews Industry veteran will lead product and service innovation across the provider's cybersecurity portfolio
-
Cisco teams up with DSIT to drive digital skills adoptionNews Partnership supports the government's TechFirst program to provide one million secondary school students with access to digital learning experiences
-
Thousands of Asus routers are being used to fuel a massive cyber crime spreeNews Black Lotus Labs has spotted a massive botnet of Asus routers built by malware that uses a common peer networking tool
-
Europol hails triple takedown with Rhadamanthys, VenomRAT, and Elysium sting operationsNews The Rhadamanthys infostealer operation is one of the latest victims of Europol's Operation Endgame, with more than a thousand servers taken down
-
Seized database helps Europol snare botnet customers in ‘Operation Endgame’ follow-up stingNews Europol has detained several people believed to be involved in a botnet operation as part of a follow-up to a major takedown last year.
-
Horabot campaign targeted businesses for more than two years before finally being discoveredNews The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
-
Brand-new Emotet campaign socially engineers its way from detectionNews This latest resurgence follows a three-month hiatus and tricks users into re-enabling dangerous VBA macros
-
Microsoft says “it’s just too difficult” to effectively disrupt ransomwareNews The company details its new approach to combatting cyber crime as the underground industry drains $6 trillion from the global economy
-
Beating the bad bots: Six ways to identify and block spam trafficIn-depth Not all traffic is good. Learn how to prevent bad bots from overrunning your website
-
Ukraine's vigilante IT army now has a DDoS bot to automate attacks against RussiaNews The 270,000-strong IT Army of Ukraine will now combine supporters' cloud infrastructure to strengthen the daily attacks against their invaders