2012 January Symantec Intelligence Report
•
1 like•1,743 views
The Symantec Intelligence Report for January 2012 showed that: - The global spam rate increased to 69.0% - The rate of phishing emails was 1 in 370 - The rate of emails containing malware was 1 in 295 - 2,102 malicious websites were blocked per day The report provided details on the sources and categories of spam, phishing and malware threats over the past month.
Recommended
Recommended
More Related Content
What's hot
What's hot (15)
Similar to 2012 January Symantec Intelligence Report
Similar to 2012 January Symantec Intelligence Report (20)
More from Symantec
More from Symantec (20)
Recently uploaded
Recently uploaded (20)
2012 January Symantec Intelligence Report
- 1. Symantec Intelligence Report January 2012 Symantec Intelligence 1
- 2. January 2012 – Report Highlights • Spam – 69.0 percent (an increase of 1.3 percentage points since December 2011) • Phishing – One in 370.0 emails identified as phishing (an increase of 0.06 percentage points since December 2011) • Malware – One in 295.0 emails contained malware (a decrease of 0.02 percentage points since December 2011) • Malicious Web sites – 2,102 Web sites blocked per day (a decrease of 77.4 percent since December 2011) • Spammers continue to take advantage of holidays and events • Best Practices for Enterprises and Users Symantec Intelligence 2
- 3. Spam Rate & Sources Spam Rate 75.5% Saudi Arabia 71.0% Education 68.9% 1-250 3 69.0% 251-500 75.0% China 70.8% Non-Profit 69.0% 73.1% Brazil 71.9% Kuwait 70.3% Automotive 70.2% Engineering 68.8% 501-1000 69.2% 1001-1500 69.1% 1501-2500 71.4% Luxembourg 70.2% Marketing/Media 69.1% 2501+ Last Month: 67.7% Six MonthAvg.: 72.0% Top 5 Geographies Top 5 Verticals By Horizontal 69.0% 2006 2007 2008 2009 2010 2011 2012 United States 25.0% Sources India 10.2% Brazil 5.8% Russian Federation 5.6% United Kingdom 4.4% China 3.7% Vietnam 3.3% Pakistan 2.3% Germany 2.3% France 1.8% January 2012
- 4. Additional Spam Metrics Global Spam Categories Global Spam Categories January November January November Category Name Message Size 2012 2011 2012 2011 Pharmaceutical 38.0% 32.5% 0Kb – 5Kb 55.7% 57.8% Watches/Jewelry 27.5% 19.5% 5Kb – 10Kb 30.5% 31.2% Adult/Sex/Dating 22.5% 12.5% >10Kb 13.8% 11.0% Weight Loss 3.5% 8.0% Unsolicited Newsletters 2.5% 17.5% Spam Attack Vectors Casino/Gambling 2.0% 2.0% Unknown/Other 1.5% 4.0% Software 0.5% 2.0% Scams/Fraud/419 0.5% 1.5% Degrees/Diplomas 0.5% <0.5% Jobs/Recruitments 0.5% <0.5% Malware <0.5% <0.5% Phishing <0.5% <0.5% Symantec Intelligence 4
- 5. Phishing Rate & Sources Phishing Rate 1 in 62.6 Netherlands 1 in 99.1 General Services 1 in 225.2 1-250 1 in 395.5 251-500 1 in 179.4 United Kingdom 1 in 141.7 Public Sector 1 in 370.0 1 in 330.9 Denmark 1 in 379.9 Canada 1 in 169.4 Education 1 in 236.5 Accom/Catering 1 in 529.4 501-1000 1 in 498.7 1001-1500 1 in 597.1 1501-2500 1 in 456.9 India 1 in 241.7 Non-Profit 1 in 410.9 2501+ Last Month: 1 in 479.0 Six MonthAvg.: 1 in 358.3 Top 5 Geographies Top 5 Verticals By Horizontal 1 in 370.0 2006 2007 2008 2009 2010 2011 2012 United Kingdom 65.2% Sources United States 13.0% Hong Kong 7.1% Australia 6.1% Ireland 4.8% Denmark 0.9% Spain 0.7% Sweden 0.6% India 0.3% Netherlands 5 0.2% January 2012
- 6. Additional Phishing Metrics Geographic Location of Phishing Web Sites 6
- 7. Additional Phishing Metrics Tactics of Phishing Distribution Organizations Spoofed in Phishing Attacks, by Industry Symantec Intelligence 7
- 8. Email Malware Rate Virus Rate 1 in 61.4 Netherlands 1 in 90.2 Public Sector 1 in 277.3 1-250 1 in 294.8 251-500 1 in 169.1 United Kingdom 1 in 138.3 Education 1 in 295.0 1 in 205.4 Luxembourg 1 in 278.0 India 1 in 203.8 Non-Profit 1 in 229.9 Marketing/Media 1 in 349.1 501-1000 1 in 325.6 1001-1500 1 in 393.8 1501-2500 1 in 285.4 Canada 1 in 236.7 Finance 1 in 281.5 2501+ Last Month: 1 in 278.6 Six MonthAvg.: 1 in 242.9 Top 5 Geographies Top 5 Verticals By Horizontal 1 in 295.0 2006 2007 2008 2009 2010 2011 2012 United States 47.1% Sources United Kingdom 36.1% India 3.0% Australia 2.3% Netherlands 1.8% Ireland 1.8% Sweden 1.5% Hong Kong 0.9% France 0.9% Canada 8 0.6% January 2012
- 9. Additional Malware Metrics Frequently Blocked Email-borne Malware Malware Name % Malware Exploit/SpoofBBB 7.31% Exploit/Link-generic-ee68 6.71% Suspicious.JIT.a 4.36% VBS/Generic 4.20% Exploit/LinkAliasPostcard-4733 2.79% Trojan.Bredolab 2.10% Trojan.Bredolab!eml-3a2a 1.58% HeurAuto-14d6 1.55% W32/Zbot-gen-c30b-54b2 1.47% Link-Trojan.IFrame.QZ-544e 1.42% • NB: 29.0 percent of email-borne malware contained links to malicious Web sites Symantec Intelligence 9
- 10. Web-based Malware Analysis Malware and Spyware Sites Blocked Per Day Web Security Services Activity: New Malware Sites per Day New sites with spyware 26/day New sites with web viruses 2,076/day Total 2,102/day 2008 2009 2010 2011 2012 January 2012 Web Policy Risks from Inappropriate Use Web Security Services Activity: Policy-Based Filtering Web Viruses and Trojans Potentially Unwanted Programs Advertisement and Popups 32.4% JS:Trojan.Script.DR 25.3% PUP:JS.Script.C 21.4% Social Networking 19.4% Trojan.JS.WPress.A 18.2% PUP:MyWebSearch.EC 14.1% Streaming Media 11.0% Gen:Variant.Graftor.8369 5.2% PUP:9231 11.9% Computing and Internet 4.5% Trojan.Maljava 3.5% PUP:Clkpotato!gen3 10.6% Search 4.0% Trojan.Script.475646 3.1% PUP:Generic.183433 9.3% Chat 3.1% Trojan.ADH.2 2.4% PUP:Generic.62006 5.3% Hosting Sites 2.9% Trojan.Gen.2 2.0% PUP:Relevant.BH 3.4% Games 2.7% JS.AddedIframe 1.9% PUP:Generic.183457 2.3% Peer-To-Peer 2.3% Trojan.Malscript!html 1.8% PUP:Generic.391406 1.9% News 2.0% Trojan.Script.12023 1.7% PUP:Generic.376539 1.5% January 2012 Symantec Intelligence 10
- 11. Most Frequently Blocked Malware at the Endpoint Frequently Blocked Malware by Endpoint Security Malware Name* % Malware WS.Trojan.H 26.52% W32.Sality.AE 6.09% W32.Ramnit!html 5.88% W32.Ramnit.B!inf 5.75% W32.Ramnit.B 5.18% W32.Downadup.B 2.63% W32.Virut.CF 1.65% W32.Almanahe.B!inf 1.63% Trojan.ADH.2 1.50% W32.SillyFDC 1.40% • NB: Approximately 13.5 percent of the most frequently blocked malware last month was identified and blocked using generic detection. *For further information on these threats, please visit: http://www.symantec.com/business/security_response/landing/threats.jsp Symantec Intelligence 11
- 12. Where to next? • Web: – www.symanteccloud.com/intelligence – www.symantec.com/spam – www.symantec.com/alert – www.facebook.com/symantec • Intranet – syminfo.ges.symantec.com/hostedservices • Twitter: – @symantec – @symanteccloud – @threatintel Symantec Intelligence 12