SANTA CLARA/SAN FRANCISCO, Calif., June 19, 2007-McAfee, Inc. (NYSE: MFE) today revisited its top ten predictions for security threats in 2007. Research from McAfee® Avert® Labs shows that threats including data-thieving phishing Web sites are on the rise, as expected. However, other pests such as remote-controlled bots show unpredicted signs of decrease.
“As we approach the midyear mark, we wanted to check on our crystal ball gazing skills,” said Jeff Green, senior vice president of McAfee Avert Labs and product development. “As we predicted, professional and organized criminals continue to drive a lot of the malicious activity on the Net. However, we were surprised that mobile malware and image spam tapered off.”
McAfee released its update at its Avert Labs Day event in San Francisco on June 19.
McAfee Avert Labs' top 10 security threats for 2007 and updates, in no particular order:
Password-stealing Web sites are on the rise
The number of phishing Web sites continues to rise exponentially. McAfee Avert Labs saw a 784 percent increase in phishing Web sites in the first quarter of 2007, with no slowdown in sight. These Web sites typically use fake sign-in pages for popular online services such as eBay, PayPal or online banking. Avert Labs anticipates increasing abuse of sites meant for online collaboration such as wiki pages and Google’s online applications. Even Internet archive sites will suffer.
Spam, particularly image spam, is on the rise
The total amount of spam caught in McAfee Avert Labs' traps has stayed fairly flat during the first part of the year. Image spam accounted for up to 65 percent of all spam at the beginning of 2007. It has actually dropped recently. Image spam is junk e-mail that includes an image instead of just text. It is used typically to advertise stocks, pharmaceuticals and degrees. The image can triple the size of a single message. This causes a significant increase in the bandwidth used by spam messages. In November 2006, image spam accounted for up to 40 percent of the total spam received. It was less than ten percent a year earlier.
Video on the Web will become a target for hackers
Cybercriminals are riding the wave of online video available on social networking sites such as YouTube and MySpace. For example, the Web site of a French rock band was used to load a Trojan horse onto the computers of fans by exploiting a feature in QuickTime.
More mobile attacks
Surprisingly, mobile malware numbers are down with a dozen new examples of malicious software targeted at devices such as cell phones and smart phones for the first quarter of 2007. That compares to 47 in the first quarter of 2006.
Adware will go mainstream
McAfee predicted that more legitimate companies would try advertising software to target consumers. However, because adware has gotten such a bad reputation, businesses are trying other ways to deliver their message on the Internet. BitTorrent, for example, is setting a trend by offering free ad-supported video downloads as an alternative to paid downloads.
Identity theft and data loss will continue to be a public issue
Unauthorized transfer of data is becoming more of a risk to enterprises. This includes loss of customer data, employee personal information and intellectual property. These can leak not only via the Web, but also through portable storage devices, printers and fax machines. More than 13.7 million records have been breached thus far this year, according to Attrition.org. That compares to 1.8 million records during the same period last year.
Bots will increase
This prediction has been particularly tough to prove. A superficial read of statistics indicates that the use of bots has actually gone down lately. Bots are computer programs that give cyber crooks full control over PCs. Bot programs typically get installed surreptitiously on the PCs of unknowing computer users.
Parasitic malware is making a comeback
No doubt, this is happening. Parasitic infectors are viruses that modify existing files on a disk, injecting code into the file where it resides. Philis and Fujacks continue to be active and Avert Labs has classified more than 150 new variants of these two families this year. Other families including Sibil, Grum, and Expiro are also active.
Rootkits will increase on 32-bit platforms
About 200,000 computers have been infected with rootkits since the beginning of 2007, according to Avert Labs’ virus tracking mechanism. That is a 10 percent increase over the first quarter of 2006. You can check your system with our free Rootkit Detective. (VirusScan for Enterprise includes anti-rootkit technology.)
Vulnerabilities continue to cause concern
There are more vulnerabilities to worry about than ever before. Microsoft issued 35 security bulletins, 25 of which were tagged critical and nine important, in the first 6 months of 2007 During the same months last year, Microsoft issued 32 bulletins, of which 19 were rated critical and 10 were considered important.
McAfee Avert Labs' Recommendation
To protect against the above threats and malicious programs, McAfee Avert Labs recommends both enterprises and consumers must constantly stay updated with the latest Data Definition Files (DATs). They need to install the latest patches. They need to implement a multi-layered approach to detecting and blocking attacks.
For more information on particular threats, or to learn more about cutting-edge security research and opinions, please visit the McAfee Avert Labs Security Blog at http://www.avertlabs.com/research/blog/.
McAfee Avert Labs maintains one of the top-ranked security threat and research organizations in the world. Avert Labs employs researchers in seventeen cities and twelve countries around the world. McAfee Avert Labs combines world-class malicious code and anti-virus research with intrusion prevention and vulnerability research expertise.
About McAfee, Inc.
McAfee Inc., the leading dedicated security technology company, headquartered in Santa Clara, California, delivers proactive and proven solutions and services that secure systems and networks around the world. With its unmatched security expertise and commitment to innovation, McAfee empowers home users, businesses, the public sector, and service providers with the ability to block attacks, prevent disruptions, and continuously track and improve their security. http://www.mcafee.com.
NOTE: McAfee and Avert are registered trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. © 2007 McAfee, Inc. All rights reserved.