Malware Prevalence May 2008

Pedro Bustamante at  16 June 08 12:40    
During the month of May we've seen a 346% growth over April of unique samples actively circulating and infecting users (23.550 samples in May vs. 6.809 in April). Out of the total seen In-The-Wild only a portion are new and not seen in previous months,
Read More...

Post a Comment: 0 Comments    Category: ,     


New Malware Prevalence April 2008

Pedro Bustamante at  09 May 08 12:51    
Even though we get thousands of new malware samples in the lab every day, only a fraction of these make it in-the-wild actively infecting users. These are the most interesting samples for us as they're the ones we need to concentrate on the most.
Read More...

Post a Comment: 15 Comments    Category: ,     


2007 WildList Proactive Detection

Pedro Bustamante at  18 February 08 09:19    
Andreas Marx from AV-Test has just finished WildList Proactive Detection and Response Time Testing for Q4 2007. You might remember I published the Q3 2007 results , where we achieved a 94% detection rate of the new malware included in the WildList proactively
Read More...

Post a Comment: 4 Comments    Category: ,     


94% Proactive Detection

Pedro Bustamante at  08 January 08 04:57    
Recently AV-Test.org published its "Response Time Tests", which measures (in hours) how fast AV companies protect against new malware that makes it into the In-The-Wild list. The study takes into consideration the WildLists from July, August
Read More...

Post a Comment: 15 Comments    Category: ,     


Think you're protected? Think again

Pedro Bustamante at  17 October 07 02:02    
For many years the security industry has been saying that in order to be correctly protected, users should have an anti-malware and firewall solution installed and up-to-date with the latest signatures at all times. However malware today is really specialized
Read More...

Post a Comment: 1 Comments    Category: , ,     


2007 Proactive Malware Detection Report

Pedro Bustamante at  16 October 07 08:44    
After working so hard it's difficult to keep it to ourselves, so it's time for a little blatant self-promotion. SuspectFile.com, a well known malware support forum in Italy, has recently finished its 2007 AV Report ( italian / english ), focusing
Read More...

Post a Comment: 1 Comments    Category: ,     


Windows Vista spotted in-the-wild

Pedro Bustamante at  08 October 07 10:41    
I just read an interesting post by Alex about adoption of Windows Vista. We recently finished a three month research study to discover infection rates on 1,206 medium-sized companies worldwide by performing a malware audit on them. The following are the
Read More...

Post a Comment: 0 Comments    Category:     


Rootkits in the mist

Pedro Bustamante at  26 June 07 06:05    
During the last 7 months we've been able to gather some really interesting statistics thanks to Panda Anti-Rootkit on which rootkits are most actively infecting users as well as new emerging rootkit techniques being used in the wild. Out of the tens
Read More...

Post a Comment: 4 Comments    Category: ,     


Mal(ware)formation statistics

Pedro Bustamante at  28 May 07 12:02    
While catching up on an old but excellent post by jason geffner on reconstructing import tables I remembered that I've been wanting to study the real impact of packers on the latest malware received at our labs. Many of us AV companies are now more
Read More...

Post a Comment: 7 Comments    Category: , ,     


Malware-friendly countries

Pedro Bustamante at  22 May 07 05:08    
Recently there have been some studies regarding Internet hosting providers which are often used maliciously to distribute malware. As this is an interesting subject we've been tracking quite a few thousand malware samples received over the last few
Read More...

Post a Comment: 2 Comments    Category: ,     


PandaLabs 2006 Reports

Pedro Bustamante at  05 March 07 01:43    
It's that time of the year again. PandaLabs has recently published its Annual 2006 Report . It's also very interesting to read the detailed quarterly reports for Q1 , Q2 and Q3 . I specially like the "day-to-day" reports section. Great
Read More...

Post a Comment: 0 Comments    Category: ,     


Comparing the comparatives

Pedro Bustamante at  16 January 07 03:46    
Unprecedented number of malware variants, targeted DDoS malware against Gmer's and Joe Stewart' s sites, Web Attacker vulnerability-based malware distribution, mini downloaders, brazilian malware mobs, botnet C&C's completely out of control,
Read More...

Post a Comment: 3 Comments    Category: ,     


The Long Tail: malware's business model

Pedro Bustamante at  08 January 07 04:53    
Chris Anderson first coined the term "The Long Tail" back in 2003 while explaining an interesting effect businesses on the Internet were starting to experience ( here and here ). Basically it consits on a statistical distribution which demonstrates
Read More...

Post a Comment: 1 Comments    Category: ,     


A very large malware honeynet

Pedro Bustamante at  19 December 06 01:28    
As of today approximately 4.5 million PCs are running a malware honeypot on their machines with Panda's behavioural-based Host Intrusion Prevention System (aka TruPrevent©). All these high-interaction malware honeypot nodes report to PandaLabs
Read More...

Post a Comment: 0 Comments    Category: , ,