Vietnam was the primary source of spam in November, says Network Box

Published 1st December 2009

Vietnam is now responsible for more than 10 per cent of the worlds spam, according to threat analysis from managed security firm, Network Box. November saw malware threat levels remain consistently high with Vietnam taking the number one spam spot from last month’s chart topper, Brazil.

Spam

The level of spam originating from Vietnam has increased by 3.4 per cent: it now accounts for 10.9 per cent of worldwide spam production, beating Brazil into second place (Brazil’s spam production levels have dropped to 8.3 per cent since October). Korea still occupies the third position in the charts, seeing an increase in spam production of 1.5 per cent, to 7.07 per cent.

Phishing

Network Box’s analysis of internet threats in November 2009 show a rise of three per cent in phishing attacks globally, reaching 28.3 per cent - although levels are still not near their September peak of 33.3 per cent.

Viruses

Once again, Brazil, the US and Korea are dominating the virus charts as the top three sources of viruses, with Brazil’s levels static at 14 per cent. The US has seen a rise of 2.4 per cent in virus production since October and Korea a rise of 1.7 per cent.

India continues to be a significant source of viruses, with 4.16 per cent originating from the sub-continent. The UK has entered the virus charts, contributing 2.7 per cent of global virus production.

Simon Heron, Internet Security Analyst for Network Box says: “Last month we noticed that fewer malware attacks were originating from the traditional top sources, such as the US and China. We can see the effect of the dispersal of malware production in the rise of Vietnam to the number one source of spam. The speed at which spam production centres are created, used and closed down again is fast and difficult to contain.”

Top Ten Viruses

Threat Name Daily Average %
spam.phish.url 28.35627
nbh-bgtrack 5.47543
backdoor.win32.small.zo 4.63436
nbh-bscript 4.25821
trojan.win32.sasfis.vbw 4.20809
trojan-spy.win32.zbot.gen 3.85568
trojan.win32.sasfis.tub 3.18150
trojan-spy.win32.zbot.aczc 3.15593
backdoor.win32.small.zs 3.00830
trojan-spy.html.fraud.gen 2.28213

Top Ten Trojans

Threat Name Daily Average %
trojan-spy.win32.zbot.gen 0.08757
trojan.win32.sasfis.tub 0.08579
trojan-spy.win32.zbot.aczc 0.03680
trojan.win32.sasfis.vbw 0.03215
trojan.win32.buzus.clys 0.02866
trojan-spy.win32.zbot.acsp 0.02307
trojan-spy.win32.zbot.xcg 0.01728
trojan-spy.html.fraud.gen 0.01649
trojan.win32.pakes.nrv 0.01341
clm.trojan.downloader-81327 0.00191

Top Ten Intrusions

Threat Name Daily Average %
NETBIOS 30.66961
BOGON 6.65087
PINGFLOOD 0.62558
HTTP-S-WEBDAV 0.24597
HTTP-S-WEBDEX 0.06069
HTTP-S-UNIXATTACK 0.03293
HTTP-S-IISATTACK 0.01949
ICMP 0.01453
SOBIG-F 0.01152
HTTP-S-NIMDA 0.00354

Top Ten Sources of Viruses

Country Daily Average %
Brazil 14.39358
US 11.78571
Korea 5.99780
India 4.16272
China 3.76017
United Kingdom 2.79022
Poland 2.56534
Argentina 2.28562
Italy 2.11577
Russia 1.85236

Top Ten Sources of Spam

Country Daily Average %
Vietnam 10.99774
Brazil 8.37169
Korea 7.07238
US 6.29791
China 5.29736
India 4.29876
Russia 2.82552
Poland 2.25183
Columbia 2.19279
Argentina 1.83513

Top Ten Sources of Intrusions

Country Daily Average %
Korea 13.42779
US 10.50194
Hong Kong 9.67634
Vietnam 7.35581
China 6.58241
Australia 5.77597
Malaysia 4.90495
Brazil 4.04051
India 2.47546
United Kingdom 1.48089

Top Ten Sources of Firewall Blocks

Country Daily Average %
Malaysia 15.30600
China 13.40050
US 13.35628
Korea 12.14963
Australia 8.50491
Hong Kong 4.92339
United Kingdom 2.62507
Taiwan 1.54843
Brazil 0.95649
Canada 0.95247


For more information on security issues, see www.network-box.co.uk, or visit Simon Heron’s blog at: http://blog.network-box.co.uk/, or follow Simon on Twitter: http://twitter.com/networkbox.

- ends -

About Network Box:

Network Box Limited (NBL) is an international managed security services company, specialising in unified threat management (UTM). It continuously defends the networks of its customers using PUSH technology to instantaneously update protection, from 12 Security Operations Centres spread around the globe. NBL’s customers in Asia, Australia, North America and Europe include companies such as BMW, Nintendo and Toyota, as well as banks, utilities companies and government organisations.

For more information, see www.network-box.co.uk / www.network-box.com.

Further press information from:
Kate Hartley
Carrot Communications
Tel: +44 (0)771 406 5233
Email: networkbox@carrotcomms.co.uk