Over the past three months were reported 200,000 infections banking Trojans

The malware aimed at stealing banking data , are extremely popular with online fraudsters. In a new report issued by Trend Micro, states that from July to September 2013 there were 200,000 cases of systems of financial institutions - so large spread of banking Trojans have not seen since 2002.

The attacks are not focused on specific sectors, and evenly distributed around the world. This indicates that cyber criminals have diversified their victims.

Hardest-hit were the United States of America - 23 % of all attacks were recorded there. In second place Brazil with 16% of attacks, and closes the top three leaders of Japan, with 12% of security incidents.

Results of a study of the world of information security market

Gartner published a study of the global security market

Last year, the information security market grew by 7.9%.

Research agency Gartner published a study on the global market for information security in 2012. According to a study last year, the IS market grew by 7.9% - to $ 19.135 billion compared with 2011.

The market leader is still the company Symantec, which owns a stake in the market at the rate of 19.6%. In 2012, the company earned $ 3.747 billion. With a big separation Symantec are followed by McAfee from shares of 8,8% and the income of $1,680 billion. Worth noting that its annual revenue has increased by more than a third (37%).

The new malicious code works through the Evernote service

Network's criminals are resorting to ever more sophisticated ways to create botnets and management.

For criminals problem is that the botnet tied to one or more command server, turning off the server command millions of client computers included in the network will not be available to attackers, in addition, often the security system of computers detect and block suspicious communications strange communication . In other words, the task before the crooks to create unusual communications between them and the army of bots-computers.

In the anti-virus company Trend Micro said that detects such an unusual way of communication. As "command server" criminals used popular notes service Evernote, which turned infected PCs.

Trend Micro experts examined botnet Asprox

 Trend Micro experts examined botnet Asprox. It is known that through this botnet attacker to send spam.

Cybercriminals sent out fake e-mails on behalf of various companies, such as DHL, FedEx and the U.S. Postal Service.

Experts point out that, since its introduction in 2007, Asprox generated a very substantial share of the world's spam. Despite the fact that over the years information Asprox was not much, it is known that the owners of the botnet improved it by making more effective.

For example, we know that at the moment Asprox has a modular structure that allows operators of the botnet, if necessary, to extend its functionality.

In addition, it is known that by spreading malicious Asprox module that steal information from infected computers. This module allows its owners to "collect" from infected systems, user names and passwords to the accounts. For example, e-mail, Web sites and FTP-servers.

The network has a new Exploit Kit Neutrino

During attack the malicious application is install on system by a trojan extortioner which blocks work of the computer.

According to analysts Trend Micro, on underground forums, a new set of exploits - «Neutrino». As the researchers found, the tool is also currently operates a gap in Java JRE (CVE-2013-0431, CVE-2012-1723). Vulnerable to attack are systems with versions of Java 7 Update 11 and earlier.

During the attack a malicious application installed on the system Trojan extortionists, locking down your computer.

Neutrino developers themselves are the following features of the set of exploits:

• User friendly control panel;
• Easy management of the domain and IP (countermeasures for anti-virus software;
• Continuous monitoring of the status of anti-virus software;
• Traffic Filtering;
• Encryption of the stolen information, etc.

Trend Micro Enterprise Security and Data Protection

Trend Micro has introduced a new product Enterprise Security and Data Protection

The company Trend Micro Incorporated, a leading manufacturer of "cloud" protection announced a new enterprise product called Trend Micro Enterprise Security and Data Protection. The proposed solution, according to developers, will help to reduce the risks, including reduce the likelihood of successful attacks on the IT infrastructure of the organization and minimizes the risk of leakage of sensitive information.

Benefits of the proposed solutions will be able to fully appreciate the organization whose employees actively use brought from home mobile devices to access corporate systems and data. According to Forrester Research "in most organizations, there are specific policies regarding the use of smartphones, tablets and other consumer electronic devices in the workplace. However, more than half of the companies, by their own admission, did not have a reliable tool for the effective implementation of these policies and monitor their compliance." Platform Trend Micro Enterprise Security and Data Protection will provide the opportunity. List of key features of the product include support for a wide range of platforms and devices (including tablets, smartphones, laptops, and removable disks), and centralized management of the proposed defense mechanisms.

Trend Micro Mobile Security 3.0

Trend Micro introduced Trend Micro Mobile Security 3.0 - The product offers a new approach to the protection of users of smartphones and tablets based on Android.

Version 3.0 significantly expands the "security perimeter" users, including information on the account Facebook. New in solutions Trend Micro Mobile Security the third generation can guarantee the inviolability of the "private digital life" of modern man. In addition, the new version also provides rapid scanning for malicious code and the ability to back up all user data in a secure cloud Trend Micro.

"Over the past year and a half, we have seen exponential growth in threats to Android. To date, we have found more than 350 000 unique malicious programs for this platform in multiple app stores and on other web sites, including such well-known, even as Google Play Store, - says Khoi Nguyen, head of mobile solutions Trend Micro. - We estimate that by the end of 2013 the number of malicious and potentially unwanted software for Android will reach fantastic notes - 1 million! "

Researchers warn about distribution of a set of the Whitehole exploits

The main feature of the new tool is that it is not detected by most antivirus programs.

According to Trend Micro, an antivirus company experts have found a new set of exploits that can avoid detection by anti-virus solutions, as well as blocking of the service Google Safe Browsing.

The experts also noted that the functional Whitehole quite similar to the more popular set of exploits Blackhole, but unlike the latter, he does not use JavaScript, to hide the use plugindetect.js.

However, according to researchers, is currently set works in "test" mode and is constantly updated. However, Whitehole already available on underground hacker forums in price from $ 200 to $ 1800.

New version of Trend Micro Deep Security 9

The new version of Trend Micro Deep Security 9 for server protection

Today Trend Micro announced a new version of the platform for the protection of servers, applications and data in physical, virtual and cloud environments - Trend Micro Deep Security 9. The solution enables companies and service providers IaaS ("Infrastructure as a Service") to increase return on investment in virtualization and cloud technologies.

The new version of Deep Security line does not need to install agents on virtual machines and is designed specifically for environments VMware ®. Developers managed to increase performance is achieved and convenience, as well as opportunities to protect the server level public and hybrid cloud environments. That allows you to dynamically handle the load while maintaining a high level of security and ensure regulatory compliance.