Slashdot Mirror


Malicious Activity Grew At a Record Pace In 2008

An anonymous reader writes "Symantec announced that malicious code activity continued to grow at a record pace throughout 2008, primarily targeting confidential information of computer users. According to the company's Internet Security Threat Report Volume XIV (PDF), Symantec created more than 1.6 million new malicious code signatures in 2008. This equates to more than 60 percent of the total malicious code signatures ever created by Symantec — a response to the rapidly increasing volume and proliferation of new malicious code threats. These signatures helped Symantec block an average of more than 245 million attempted malicious code attacks across the globe each month during 2008." Another anonymous reader notes a related report from Verizon (PDF), which says 285 million records were compromised in 2008, more than the total of the previous four years combined.

56 comments

  1. A Full Day of Helpful News Reports! by eldavojohn · · Score: 5, Insightful

    Wow! First McAfee found out through objective research that spam ruins the environment and now Symantec has an unbiased report showing malicious activity is on the rise!

    I can not wait for Richard Stallman's report on commercial closed source software costing a record high price in 2008. I mean assuming he comes to that conclusion, of course.

    I would just like to point out that the URL for that PDF report indicates it is stored in a directory named 'mktginfo.' I wonder what that stands for ... "Mortal Kombat: The Game Info" perhaps?

    --
    My work here is dung.
    1. Re:A Full Day of Helpful News Reports! by A.+B3ttik · · Score: 4, Funny

      I would just like to point out that the URL for that PDF report indicates it is stored in a directory named 'mktginfo.' I wonder what that stands for ... "Mortal Kombat: The Game Info" perhaps?

      If you search the folder, there's another file, 'info.txt' with one line:

      UP DOWN UP DOWN A B A B A B A B A B START SELECT

    2. Re:A Full Day of Helpful News Reports! by Red+Flayer · · Score: 1

      Not for nothing... but just because something is published as part of a marketing campaign doesn't mean it isn't significant, or a worthwhile topic for discussion.

      It DOES mean we should take the figures with a grain of salt.

      I'm not really sure what you're adding to the discussion, we are all already aware that security vendors pump risk and impact estimates all the time.

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    3. Re:A Full Day of Helpful News Reports! by Nerdfest · · Score: 1

      See, this is why URL shortening is a bad idea. Well, that, and I've heard that it's fattening.

    4. Re:A Full Day of Helpful News Reports! by emocomputerjock · · Score: 1

      Start select? That's why I couldn't get that damned code to work, thanks!

    5. Re:A Full Day of Helpful News Reports! by Scott+Scott · · Score: 2, Insightful

      I don't trust ANYTHING that blacklists my security toolkits and looks at me like I owe it something.

      Is malicious code on the rise? Probably. So is the poplation of computer users. Is Symantec padding its "findings" by including anything it can get away with? Oh very yes.

    6. Re:A Full Day of Helpful News Reports! by DomNF15 · · Score: 1

      This info should do wonders for...their stock price

    7. Re:A Full Day of Helpful News Reports! by Anonymous Coward · · Score: 0

      You actually wanted to hit select and then start, and only if you wanted a two player game. Hitting select after start didn't do anything.

    8. Re:A Full Day of Helpful News Reports! by hesaigo999ca · · Score: 1

      COME OVER HERE!!....~enter your finshing move here~

    9. Re:A Full Day of Helpful News Reports! by Chris+Mattern · · Score: 1

      You, sir, have not spent enough time impaling game sprites with a harpoon. It's GET OVER HERE!

    10. Re:A Full Day of Helpful News Reports! by nixdroid · · Score: 1

      Nah, they don't need marketing hype, they have this marketing agreement with Microsoft...

      --
      -- Consensus - 50% probability that the majority are wrong.
    11. Re:A Full Day of Helpful News Reports! by bcrowell · · Score: 1

      I can not wait for Richard Stallman's report on commercial closed source software costing a record high price in 2008. I mean assuming he comes to that conclusion, of course.

      The difference is that I can see why the RMS version would make it through the firehose, because slashdot users tend to be fans of free software. What I can't understand is why a slashvertizement for Symantec made it through. I wonder if companies like Symantec are astroturfing via the firehose system, using throwaway or suckpuppet accounts. There's a huge amount of slashvertizing making it through the firehose these days.

    12. Re:A Full Day of Helpful News Reports! by Chabil+Ha' · · Score: 1

      I'm not saying it isn't so, but just because they have a conflict of interest does not mean they are wrong. You are not wrong in being suspect, but don't let skepticism taint and bias your own opinions, either. It would be much more insightful if you were able to provide evidence that flies in the face of these reports.

      --
      We're all hypocrites. We all have hidden parts, it's the contrast between them that make us more a hypocrite than others
    13. Re:A Full Day of Helpful News Reports! by techno-vampire · · Score: 1
      I can not wait for Richard Stallman's report on commercial closed source software costing a record high price in 2008.

      I think he'd be more likely to announce that commercial closed source software was overpriced in 2008.

      --
      Good, inexpensive web hosting
    14. Re:A Full Day of Helpful News Reports! by hesaigo999ca · · Score: 1

      I stand corrected.....I always played Baraka anyways!....something about getting skewered with double blades

  2. Time to buy! by _Sprocket_ · · Score: 4, Funny

    Obviously it's a good time to make that security products purchase you've been putting off. You probably want something effective... say a software suite that's been able to block more than 245 million attempted malicious code attacks across the globe each month.

    Oh. Wait. I see.

    1. Re:Time to buy! by Anonymous Coward · · Score: 0

      I already have it. Debian. No malware to date, unless you count a couple of browser hijacks like being rick rolled. True, Linux isn't perfect, but it's a helluva lot closer than Windoze!!

    2. Re:Time to buy! by ak3ldama · · Score: 1

      Obviously it's a good time to make that security products purchase you've been putting off.

      Yes, in these economic times it is surely acceptable to green flag that project IT has been proposing. Surely it is a sound idea.

      Seriously... this environment where everyone runs Microsoft products is behavior that is incomprehensible. Why would everyone want to place this target on themselves? It is a policy of opting in to these malicious attacks. There is no competitive market place where the proper winner is chosen, but a path everyone keeps going down over and over like cattle. If there was an even split between competing products (such as OS X, Linux, Windows) these attacks would eventually have to evolve in a manner that would be able to be studied and analyzed in a meaningful manner. As it is they just keep attacking Windows without care. I am not saying Windows is flawed - recent products are reasonably competitive with the other two - I am saying there aren't proper metrics and patterns able to be analyzed.

      --
      "but money is the God of Algiers & Mahomet their prophet." - Rich. O'Bryen June 8th 1786
  3. malicious code .. by rs232 · · Score: 3, Funny

    What Operating Systems did this malicious code run on?

    --
    davecb5620@gmail.com
    1. Re:malicious code .. by A.+B3ttik · · Score: 2, Funny

      TI-86

    2. Re:malicious code .. by SpaceLifeForm · · Score: 2, Funny

      There are lots of Operating Systems involved.

      They just happen to originate from the same place.

      --
      You are being MICROattacked, from various angles, in a SOFT manner.
    3. Re:malicious code .. by Thelasko · · Score: 2, Funny

      What Operating Systems did this malicious code run on?

      TI-86

      When will people stop being slaves to Texa$ In$trument$? HPs are so much more secure.

      --
      One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
    4. Re:malicious code .. by pseudonomous · · Score: 1

      So ... this code is being used to maliciously cheat on calculus tests?

    5. Re:malicious code .. by CarpetShark · · Score: 1

      What Operating Systems did this malicious code run on?

      The legal and political systems. Most of the malicious code was from the RIAA.

    6. Re:malicious code .. by Anonymous Coward · · Score: 2, Funny

      What Operating Systems did this malicious code run on?

      TI-86

      When will people stop being slaves to Texa$ In$trument$? HPs are so much more secure.

      We're never going to see the "Year of The HP Calculator" until you people wake up and realize that Joe Six-pack doesn't want to have to learn RPN just to do simple algebra!

    7. Re:malicious code .. by frank_adrian314159 · · Score: 1

      HPs are so much more secure.

      That's because only backward Polish people can figure out how to use them.

      --
      That is all.
    8. Re:malicious code .. by david_thornley · · Score: 1

      What Operating Systems does the unbiased enterprise publishing this report sell protection from malicious code on?

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    9. Re:malicious code .. by lordtoran · · Score: 1

      Bah, H-Pee is so elitist crap. My Casio has 12 programmable firewall registers!

      --
      Want to hear the voice of GOD? cat /boot/vmlinuz > /dev/dsp
    10. Re:malicious code .. by Anonymous Coward · · Score: 0

      But can it run Wolfenstien 3D?

    11. Re: malicious code .. by rs232 · · Score: 1

      "There are lots of Operating Systems involved. They just happen to originate from the same place"

      What Operating System does the extended botnet run on that is used to hose the Internet with spam?
      --

      I can't refute the top post so I'll just get my sock.Puppet accounts to mod it FUNNY

      --
      davecb5620@gmail.com
  4. Why wouldn't it grow? by mc1138 · · Score: 4, Insightful

    Security implementations constantly lag behind the times. Even the pentagon does more reactive rather than proactive implementations. http://news.slashdot.org/article.pl?sid=09/04/08/2246248 Even if this were to change, it would more likely just cause an escalation of the issue. Even as security gets more complex, so too will the hackers, especially those funded or controlled by organized crime. Your best bet is to use robust security, and never, ever assume that the Internet, or any network, is a safe place.

  5. Vista -- Security by KingPin27 · · Score: 3, Funny

    Perhaps McAfee noticed that there are more users running computers with "Black Screens where they type in command lines" -

    --
    "i lost my dignity on a slippery wiener"
    1. Re:Vista -- Security by LandruBek · · Score: 1

      The technical term is prompt commands.

      --
      $META_SIG_JOKE
  6. Helpful Code by Ukab+the+Great · · Score: 5, Insightful

    If code that screws up your computer and resists deinstalling is defined as malicious, then the Symantec and McAfee suites must account for at least half of the malicious code being written.

    1. Re:Helpful Code by darnkitten · · Score: 1

      yah. The clerk at the town I work for was on the phone all morning with tech support for her auto-backup software. The verdict? The Symantec security suite has been interfering with her backups. She finally saw reason and said she will allow me to replace the suite with something else (once the subscription runs out, giving her months to change her mind). The problem is this: to her, Symantec/Norton is synonymous with antivirus. Despite my assurances, she can't imagine that anything else will be better or will provide less problems. Malicious or not, Symantec and McAfee have their hooks in the market, and are almost impossible to clean out.

    2. Re:Helpful Code by twistedsymphony · · Score: 1

      that's easy to fix... you just need to have the nightly news do an expose on how incompetent the big name AV softwares are... all you need to do is find a news personality that people trust and is smart enough to pull it of.... hmmm maybe it's not so easy.

  7. Simple by Joebert · · Score: 2, Insightful

    The reason is simple, people aren't even getting a slap on the wrist.

    --
    Wanna fight ? Bend over, stick your head up your ass, and fight for air.
    1. Re:Simple by VeNoM0619 · · Score: 1

      Let me know when you catch the Downadup/conficker authors.

      In the meantime, encouraging security (and equally stability) over all other features/pretty designs should be done as well. Perhaps Symantec and McAfee releasing these reports were meant to help their sales... or perhaps what they don't realize is that people are 1 step closer to Linux because of these reports...?

      --
      Disclaimer: I am not god.
      We may not be created equal
      But we can be treated equal.
    2. Re:Simple by Joebert · · Score: 1

      Let me know when you catch the Downadup/conficker authors.

      The point is that something has to get to that point before anything is done to the people involved.

      It didn't take long for the people who broke into Sarah Palins email account to get tracked down and brought to justice, but only because of her status.

      The current state of how things are handled in this basically like only going after criminals who commit crimes against rich people.

      --
      Wanna fight ? Bend over, stick your head up your ass, and fight for air.
    3. Re:Simple by Anonymous Coward · · Score: 0

      The person who broke into Sarah Palin's email account was stupid enough to use a commercial anonymization service, and post screenshots containing session strings for that service. The service kept logs, which were sufficient to trace the activities do the kid that did it.

      The Conficker authors aren't stupid like that.

    4. Re:Simple by VeNoM0619 · · Score: 1

      You can't have an anonymous internet AND access to records of every origin of data.

      I'll take the wild west with everyone being anonymous, so people learn not to attack the authors and fall into a false sense of security. Learn to protect yourself, don't make others do it for you.

      --
      Disclaimer: I am not god.
      We may not be created equal
      But we can be treated equal.
  8. More like "We tell you activity rose so you buy" by Anonymous Coward · · Score: 0

    I wish people would stop posting crap "news". Its more like a press release announcing a new product that any actual fact.

    Its basically a PR stunt that wants them to buy software.

    1.6 Million new code..ohhh no whatever shall we do! What they don't tell you is all but a handfull is the same code just modified, and that less than that actually is a threat to common idiots who get infected.

  9. Symantec by Anonymous Coward · · Score: 2, Funny

    With our Corporate Edition SAV 10 installed, my machine is too slow to effectively run any other malware. I think Symantec did a good job of preventing other malware from getting any disk I/O at all.

  10. read: by nimbius · · Score: 1

    even though we're circling the shitter, our products are still move valuable than ever.

    --
    Good people go to bed earlier.
  11. Buy something else? by TheLink · · Score: 1

    Even if it's time to buy, it might be time to buy something else.

    I doubt there were really 1.6 million really unique malware in 2008 - many of those are probably just variants. If Symantec has to add sigs for so many variants it means their tech is not so good.

    Anyway, I'm not bothering with AV for my WinXP PC. Looking at how much the popular AV software out there slow down PCs, the "cure" seems worse than disease.

    IMO, McAfee and Symantec are nearly as bad as being infected by the less nasty trojans. Bloatware.

    Kaspersky and Comodo updates take ages (Kaspersky updates are REALLY slow!), AVG realtime scan is slow (and their link scanning thing was stupid), Avira nags a lot (but if you can turn it off or ignore it, it's not so bad I guess).

    One day I guess I should test Avast.

    --
    1. Re:Buy something else? by steelcaress · · Score: 1

      Avast rocks. Catches stuff on web pages and web *searches.* (favicons infected with trojans). I've never had a botched install routine, updates itself every day (sometimes more than once), and I've used it for years. Never had a virus slip past it. I even use free net virus scanners (like McAfee) as a bench test.

      Doesn't slow down any of my computers, either. Not my XP desktop (1.33 GHz with 512 MB RAM) nor my dual-core laptop with 4 GB RAM. As with anything, YMMV.

  12. "Grow at a record pace . . . ?" by PolygamousRanchKid+ · · Score: 1

    I get tons of emails every day promising to enable me to "grow at a record pace." Maybe the two are somehow connected.

    This is actually a good strategy to get at some of the Stimulus pork pile. Get a professional grant writer provided by an IT company to draft something up that will convince federal officials that you buying that companies products, will solve the economic crisis.

    I read it in the Wall Street Journal a couple of weeks ago, actually.

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
  13. Take all the threats recently... by Captain+Spam · · Score: 1

    Well! After this and the report from McAfee that all that ugly, ugly spam is ruining the environment, I'm convinced I need to do something! And since Microsoft told me that Vista is the most secure OS on the planet (and since they invented the computer, you know we should believe them!), all this malicious activity has to be the evil work of that gosh-darn Linux computer I've got back at home! Good thing these companies have wide-reaching, robustly-developed tools to help secure my Lin...

    Oh. Huh.

    Why does this sound to me like an attempt at an orchestrated astroturfing campaign amongst software giants that either wasn't planned very well or was intended for people far more stupid than us and/or with less long-term memory than we have?

    --
    Demanding constant attention will only lead to attention.
  14. oh yeah by Sir_Lewk · · Score: 0, Redundant

    TI-86's are the bomb.

    --
    "linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)
    1. Re:oh yeah by twistedsymphony · · Score: 1

      I prefer the TI-89 personally

  15. 285 million vs zero by Wingsy · · Score: 0, Troll

    "...says 285 million records were compromised in 2008." How about that. And not a one on a Mac.

    --
    If I didn't have absolutely NOTHING to do, I wouldn't be here.
    1. Re:285 million vs zero by Anonymous Coward · · Score: 0

      Does anybody know the outcome of the recent pwn2own contest? Sorry, I haven't been paying attention lately.

  16. A more appropriate headline: by Anonymous Coward · · Score: 0

    'Signature-based antivirus failing?'

  17. Ditch all your Windows AV products right now. by ciderVisor · · Score: 1

    Seriously, I (and many colleagues, friends and relatives) have discovered the delights of simply running Windows as a Limited User. No more signature file downloads. No more zero-day exploits as a result of out-of-date signature files. No more background scanning bogging down your machine. Just a nice, clean system that can only really be compromised as a result of user interaction (trojans, phishing, user-permitted privilege escalation, etc.). My current Windows XP system has been running this way for 2 1/2 years without any infection. AV vendors can f*** right off as far as I'm concerned.

    --
    Squirrel!
    1. Re:Ditch all your Windows AV products right now. by dudpixel · · Score: 2, Insightful

      But the summary specifically mentions that a lot of this code targetted users' personal info - which in your example would still be accessible.

      This is exactly what I want to protect myself against. If the OS gets crippled or broken, I can fix that, but if they delete or worse, steal, my data, thats dangerous. Backups will protect against data being deleted but how do you prevent your personal data from being stolen?

      And no, putting all my data in a location where even I cant access it is not a solution.

      Most decent firewalls now will filter which applications are allowed to access the internet and warn you when any application not in its list tries to. Its not the perfect solution but definitely more secure than turning a blind eye.

      --
      This seemed like a reasonable sig at the time.