UPDATED 22:06 EST / JULY 24 2017

INFRA

Malware attacks nearly quadruped in the past three months

Malware is exploding across the globe, and now we know by how much.

Security company Comodo Group Inc. said in a new report that it detected a nearly fourfold increase in malware infections in the second quarter — not compared with a year ago, but with just three months ago. In its “Comodo Threat Research Labs Q2 2017 report” out today, the company detected 97 million malware infections in the quarter, up from 25 million detected in the first quarter.

Leading the pack with malware infections were trojans, which is software or code that pretends to be something else to trick users into installing it. There were 5.8 million trojan infections, followed by 4.5 million worm infections, 2.6 million traditional viruses followed by 209,000 “backdoor” installations, a method of bypassing conventional authentication.

Those behind malware creation had no qualms about spreading the love, with infections detected in 236 of the world’s 253 country-code top-level domains. Some countries were favored over others, with Russia, the Philippines and Indonesia topping the list for infection. The United States was not far behind, leading the list for trojan infections.

Interestingly, the type of malware tends to vary depending on the wealth of a given nation. “Backdoors are the highest ‘class’ of malware, targeting the most affluent countries, often in a targeted fashion; Australia, Great Britain, and Japan appeared prominently in this data…. Trojans also tend to be more clustered around richer nations, but appear in every country, and every vertical,” Comodo said in a blog post. “Viruses and worms are more often found in poorer countries; viruses are widespread, while worms in particular take advantage of the world’s least protected networks.”

In an age of high-profile hacking attacks, the report also found that relatively few types of malware dominate infections. Upatre, a trojan first detected in 2013, accounted for 83 percent of all infections in the U.S. during the quarter despite its relatively old age. In other categories, Brontok topped the worm chart, a new version of Ramnit which first emerged in 2011 topped the virus chart, while DarkKomet was the most commonly used backdoor.

While noting that no one was safe from malware attacks, the report concluded that telecom, technology and online services companies are currently the most popular targets for attackers.

Photo: iphonedigital/Flickr

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.