Posted by SecExtra on March 05th, 2008

We just got latest list of phishing scams and viruses that are causing the most problems as we progress through 2008. You have most likely seen some of these yourself over recent weeks. Below is the list of the top 10 for February:

1. Tax Notification  
2. Notification from Billing Department
3. NatWest Bank: please confirm your data
4. please confirm your data  
5. NatWest Bank customer service: online form released
6. HSBC Bank: please confirm your data!
7. HSBC Bank: official information  
8. HSBC Bank customer service: please confirm your data!
9. please confirm your data.  
10. please confirm your data!

TOP BRANDS TARGETED BY PHISHING SCAMS
HSBC - 40%
CitiBank - 38%
Natwest - 16%
Bank of America - 6%

MOST PREVALENT VIRUSES (EUROPEAN PCs scanned by McAfee) - February 2008
This is a monthly tracker of the leading threats that are infecting computers across Europe and each threat has been detailed below:
 
Name of Threat: VBS/Psyme
Type of Threat: Trojan
Threat aimed at: A new variant of VBS/Psyme has been observed which is part of a threat that attempts to spread on the premise that it offers a codec to see a video of the suicide attack that killed Pakistani Prime Minister Benazir Bhutto.  For more information on this threat, please see the Avert Blog. Recently, this threat was proactively detected on a major Korean website. The exploit was hidden in an legitimate webpage believed to have been subjected to unauthorised modifications. Similar incidents had been reported before, on other relatively less known websites.  This threat causes unpatched Internet Explorer clients to download and execute further malware.
No. of PC’s scanned: 983,400
PC’s Infected: 7.29%
 
Name of Threat: Adware-ZangoSA
Type of Threat: Program
Threat aimed at: McAfee AVERT™ recognizes that this may have legitimate uses in contexts where an authorized administrator has knowingly installed this application. If you agreed to a license agreement for this, or another bundled application, you may have legal obligations with regard to removing this software, or using the host application without this software. Please contact the software vendor for further information. See http://vil.nai.com/vil/DATReadme.asp for a list of Program detections added to the DATs.
See http://vil.nai.com/vil/pups/configuration.htm for information about how to enable, disable, and exclude detection of legitimately installed programs.
No. of PC’s scanned: 983,400
PC’s Infected: 4%
 
Name of Threat: JS/Wonka
Type of Threat: Trojan
Threat aimed at: The risk assessment of this threat has been updated to Low-Profiled due to media attention at: http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?newsid=4825.
Several cases have been reported to AVERT as potential incorrect identifications of JS/Wonka, which turned out to be accurate hits. These observations were typically made upon visiting hacked web pages.  These hacked pages have an IFRAME inserted that point to an external website containing malware such as Exploit-Codebase, Exploit-ANIFile, W32/Dumaru.gen, and Exploit-MhtRedir.gen.
No. of PC’s scanned: 983,400
PC’s Infected: 3.69%