Top malware to hit SA in 2013

2013-12-09 09:01
Spam has increased slightly, research by a security firm has found. (Duncan Alfreds, News24)

Spam has increased slightly, research by a security firm has found. (Duncan Alfreds, News24)

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories

Cape Town - Computer users should be on guard that criminals will try to exploit any major event in order to compromise machines to steal personal and financial information.

With the death of former South African president Nelson Mandela, it is likely that hackers will send e-mail or even text messages purportedly from a "distant Mandela relative" offering a target cash for services or a business venture.

These messages are inevitably spam and they often have malware attached.

Spam remains that most pressing concern of PC users with about 68% more concerned about unsolicited mail that PC virus infection, a survey conducted by O+K Research found.

But spam is not confined to e-mail. Spammers have also evolved to exploit social networks.

Prolific spammers

"Social networks are not immune to spamming tactics; you see it also on forums on the internet. People are discussing a certain topic and suddenly there's a completely unrelated comment with an advert," managing director of Dr Pieter Streicher recently told News24.

An emerging social network engineering scam is for the user to be sent a mail with a message that a Facebook user has shared her private pictures and you have to click a link to access them.

A large-scale survey done by researcher Giovane Cesar Moreira Moura in 2013 found that 50% of spam was confined to only 20 ISPs.

Of those, Spectranet in Nigeria was one of the most prolific with 62% of all the addresses controlled by that ISP sending out spam, the BBC reported.

One of the typical scams to hit South Africans during 2013 was a "notification" from Sars to indicate that a taxpayer had received a substantial payment. The attachment in the mail was generally a link to an attack website designed to steal credit card information.

Security company Kaspersky Lab identified the top threats for South African users during 2013, with the malicious website dominating the landscape.

The list below indicates the position, name of attack, and the percentage of times seen by Kaspersky experts.

1    Malicious URL - 84,14%
2 - 5,58%
3    Trojan.Script.Generic - 3,81%
4    AdWare.Win32.Bromngr.b - 1,71%
5    Trojan-Downloader.Script.Generic - 1,42%
6    Trojan.Win32.Generic - 0,67%
7    Trojan.Script.Iframer - 0,58%
8    AdWare.Win32.MegaSearch.ap - 0,31%
9 -    0,29%
10    Exploit.Script.Blocker - 0,24%
11    Email-Worm.Win32.Mydoom.l - 0,21%
12    Trojan.JS.Redirector.xa - 0,15%
13    Trojan-Downloader.Win32.Generic - 0,14%
14    AdWare.Win32.Agent.aeph - 0,11%
15    AdWare.Win32.DelBar.a - 0,07%
16    Trojan-Downloader.Win32.MultiDL.k - 0,09%
17    AdWare.Win32.Shopper.aaz - 0,07%
18    Trojan.JS.Iframe.aeq - 0,06%
19    Exploit.Script.Blocker.u - 0,06%
20 - 0,06%

- Follow Duncan on Twitter
Read more on:    kaspersky lab  |  cybercrime

Join the conversation! encourages commentary submitted via MyNews24. Contributions of 200 words or more will be considered for publication.

We reserve editorial discretion to decide what will be published.
Read our comments policy for guidelines on contributions. publishes all comments posted on articles provided that they adhere to our Comments Policy. Should you wish to report a comment for editorial review, please do so by clicking the 'Report Comment' button to the right of each comment.

Comment on this story
Comments have been closed for this article.

Inside News24


Book flights

Compare, Book, Fly

Traffic Alerts
There are new stories on the homepage. Click here to see them.


Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire network.


Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.