Microsoft report shows scareware, file-fomat bugs on rise

By Dan Kaplan

June 18, 2010 Updated Apr 9, 2009 at 11:32 AM EST

Rogue anti-virus, or scareware, programs -- which entice a user into purchasing fake security software by telling them their machine is infected -- has emerged as the biggest security threat facing internet users, according to Microsoft's sixth Security Intelligence Report.

In the second half of last year, the seven most common families of threats removed from Windows PCs were related to scareware programs, according to the report, released Wednesday. The most common family of trojan downloaders used to distributed rouge security software, Win32/Renos, was found on 4.4 million machines, a 67 percent increase over the first half of 2008.

"What they do is take advantage of people's fears and they blast false infection messages onto the computer," Jimmy Kuo, principal architect of the Microsoft Malware Response Center, told SCMagazineUS.com this week. "It's the No. 1 issue we encounter."

Users are getting infected merely by visiting a website that has been seeded with an exploit, a ploy known as drive-by downloads, he said. The threat, though, affects more home than corporate users.

"You don't have users in the company thinking they have to pay for anti-virus software," he said. "On the other hand, corporate users will still see them while they go rummaging on the internet."

The report also analyzed file-format exploits, in which attackers distribute malicious files for programs such as Microsoft Office or Adobe Reader. The study found that 91.3 percent of file-format attacks leverage a two-year-old Word vulnerability, which was patched by MS06-027.

Kuo said this is proof that people aren't patching their systems as diligently as they should be.

"As we found out in the Conficker scenario, the corporate situation is that they obviously are aware of the patches that we issue, but most corporations have a situation where they'll run [the fixes] through tests that take a rather long time," he said. "And sometimes, they opt for not invoking the potential that they'll have incompatibilities because of the patch."

The report also found that stolen equipment, such as laptops, accounted for the most common cause of data breaches; more than 97 percent of email is unwanted; the number of Microsoft security bulletins issued in the second half of 2008 rose 67.2 percent; and financial organizations and social networking sites are the most frequently targeted vertical in phishing attacks.




What are your thoughts CLICK HERE to leave us a "QUESTION OF THE DAY” comment.

Want to be in the know for the next weather event, the next school closing or the next big breaking news story?

TextCaster alerts from 21Alive.com are your defining source for instant information delivered right to your cell phone and email. It's free, easy and instant. Sign-Up Now!

Powered by Summit City Chevrolet



© Copyright 2014, A Granite Broadcasting Station. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

To submit a comment on this article, your email address is required. We respect your privacy and your email will not be visible to others nor will it be added to any email lists.