Feeds

Macro and script viruses dying off

New faces of malicious code for 2003

  • alert
  • submit to reddit

Security for virtualized datacentres

The end of standard mass mailing worms is nigh - maybe as soon as before the end of 2003. But their replacements - Trojans and Spyware - are much, much worse.

Or so Roger Thompson, technical director of TruSecure, a risk management firm, forecasts. In particular he warns of the risk from Remote Access Trojans (RATs) or backdoors posted on the Net or spread via email.

"Malware code writers will continue to disguise RATs and backdoor scripts as 'adult' movies and then post them to pornography new groups targeting inexperienced users," he writes. "Expect them to continue through 2003 but they will be mixed with more and more grey ware (i.e. spyware and advertising monitoring that is barely legal)."

Thompson notes mass-mailing Windows viruses were largely unsuccessful in hitting corporations in 2002, with the notable exception of organisations which did implement proper filters. One of the two biggest worms of the year was Klez, which infected home PCs mostly.

Macro and script viruses emerged at a rate of 200 to 300 a month in 2002 but this will decrease to approx. 20 to 30 per month, TruSecure believes.

According to Thompson, the impact of the mass-mailing worm is mostly over for corporations but it will still have an impact on SOHO (small office/home office) environments this year.

Code Red

TruSecure (and more particularly its affable "Surgeon General" Russ Cooper) came to notice in 2001 for predicting that the Code Red virus had the potential to "meltdown" the Internet.

This warning was, we now know overstated. Cooper told us, when we met up with him before Christmas, that he did not regret the warning. He was acting, he said, on early analysis of Code Red and its possible spread through NT4 boxes. This turned out to be a lesser risk than first believed.

Fair enough; but TruSecure is still banging on about Code Red-style attacks to this day. Thompson warning he expects "another attack in 2003 in the class and level of Code Red".

If he means another outbreak of hysteria from sectors of the security community (which ought to know better) over some supposed Internet-crushing threat, how could we disagree? ®

Related Stories

The Code Red hype Hall of Shame
Home user insecurity spurs email virus growth in 2002
Porn diallers and Trojans - the new face of malicious code
Closing spyware loopholes

External Links

Information Security Predictions for the New Year, by TruSecure

Internet Security Threat Report 2014

More from The Register

next story
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
Special pleading against mass surveillance won't help anyone
Protecting journalists alone won't protect their sources
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Apple's iPhone 6 first-day sales are MEANINGLESS, mutters analyst
Big weekend queues only represent fruity firm's supply
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Bill Gates, drugs and the internet: Top 10 Larry Ellison quotes
'I certainly never expected to become rich ... this is surreal'
Big Content Australia just blew a big hole in its credibility
AHEDA's research on average content prices did not expose methodology, so appears less than rigourous
EMC, HP blockbuster 'merger' shocker comes a cropper
Stand down, FTC... you can put your feet up for a bit
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.