February 8, 2011 | Bratislava | Press Releases

Global Threat Statistics: Win32/Conficker Returns to No. 1

BRATISLAVA - Based on statistical information collected by ESET ThreatSense.Net in the month of January, Win32/Conficker (5.38%) has moved back to the first position as the top threat globally. The second most frequently occurring piece of malware is INF/Autorun (5.30%), followed by Win32/PSW.OnLineGames (2.17%).

The Win32/Conficker threat is a network worm originally propagated by exploiting a recent vulnerability in the Windows operating system. INF/Autorun worm is a worm that spreads via removable media and contains a backdoor. It can be controlled remotely and ensures it is started each time infected media is inserted into the computer.  Win32/PSW.OnLineGames.is a family of Trojans used in phishing attacks aimed specifically at game-players: this type of Trojan comes with keylogging and (sometimes) rootkit capabilities which gather information relating to online games and credentials for participating.

Win32/Bflient (1.19%) appeared in ESET Top Threat ranking just three months ago and is moving up the ranking very quick. In December, Win32/Bflient assumed the eighth position, and this month is just one position shy of top five. On the other hand, Java/TrojanDownloader.Agent.NCA (0.76%) moved down by three places, from seven to number ten.

Global Threats According to ESET ThreatSense.Net® (January 2011)

Global Threats According to ESET ThreatSense.Net® (January 2011)

EUROPE, MIDDLE EAST, AFRICA (EMEA)

INF/Autorun remains one of the dominant threats in the EMEA region. It is topping the threat rankings in South Africa (10.65%), Romania (7.06 %), Israel (6.11%), Greece (5.78%), Croatia (5.1%), Slovenia (4.72%), and Austria (3.88%).

The world’s most widespread threat, Win32/Conficker still remains number one in Bulgaria (8.45%), and Italy (4.55%). Win32/HackKMS.A, one of Europe’s top ten threats, leads the stats in Portugal (5.46%), Denmark (4.50%), and the Netherlands (3.30%).

In Germany, users have been under the attack of Java/TrojanDownloader.Agent.NCA (5.0%). Instant and social messaging worm Win32/Yimfoca.AA is still the most widespread malware in the Czech Republic (4.35%). The worm serves as a backdoor and can be controlled remotely.

About ThreatSense.Net®

ThreatSense.Net® is ESET’s in-the-cloud malware collection system utilizing data from users of ESET solutions worldwide.  This continual streaming of information provides ESET Virus Lab specialists with a real-time accurate snapshot of the nature and scope of global infiltrations. Careful analysis of the threats, attack vectors and patterns serves ESET to fine-tune all heuristic and signature updates   ̶ to protect its users against tomorrow’s threats.

About ESET

Founded in 1992, ESET is a global provider of security solutions for the home and business segment. The industry leader in proactive malware detection, ESET NOD32 Antivirus holds the world record for the number of Virus Bulletin "VB100 Awards," never to have missed a single “In-the-Wild” worm or virus since the inception of testing in 1998.
ESET has headquarters in Bratislava, Slovakia and offices in San Diego, USA; Buenos Aires, Argentina; Prague, Czech Republic; Singapore and an extensive partner network in more than 180 countries. In 2008, ESET has opened a new research center in Krakow, Poland. ESET was named by Deloitte’s Technology Fast 500 as one of the fastest-growing technology companies in the region of Europe, Middle East and Africa.