In August, Symantec discovered 213 new variants of malicious programs for mobile devices

In addition, experts have found 469 new vulnerabilities, which is 13% higher than in August 2012.

Symantec has introduced a virus activity report for August 2013. Experts analyzed the level of spam, the most common scams on social networks, the number of malicious programs for mobile devices, and phishing attacks.

The authors of the study say that the most popular form of fraud in social networks has been spreading false information about the sale of the goods at a discount. This type of attack accounted for 82% of all attacks carried out in the social networks.

In the field of data breaches in August there was a kind of lull - only seven notices. However, even with nine violations that happened earlier in 2013, also said in August. Thus, from the beginning of the year all over the world Symantec managed to record 125 violations related to the loss of data.

In August of this year was also recorded 213 new variants of malicious programs for mobile devices. In addition, experts have found 469 new vulnerabilities, which is 13% higher than in August 2012.

Browsers - the main entry point of malware in corporate computers

The company Palo Alto Networks, specializing in network security, has published an analytical review «Modern Malware Review» new and hidden malware in real-world enterprise networks.

The review suggests that traditional anti-virus solutions are not able to identify the vast majority of malware infecting the network through real-time applications, including Web browsing.

According to the survey, 94% are not fully detected malware samples delivered through a web browser or via a web proxy. 70% of malicious IDs left in the execution or transmission of data that can be used for detection. 40% at first sight unique harmful programs actually are the version of the same code. The most effective method for the introduction of malware into the network analysts acknowledged FTP. 95% of malware penetrating the network via FTP and remain undetected by antivirus programs for more than 30 days. It has been revealed 30 different methods of avoiding security systems and more than half of all the methods were intended to remain undetected malicious programs.

Zbot family Trojans infects selected systems only

Malicious programs are targeted at systems with ID CLSID, which is similar to their ID.

The AVG's specialists have analyzed one sample of the Zbot family Trojans. The experts found that the malware uses the CLSID as security checks in order to prevent themselves analyze.

Researchers have been able to run the sample Zbot family on a real computer and find out that, before starting out, malware downloads data twice, and then decrypts it and compares certain bytes with other data obtained from the local machine.

After the analysis, the experts found that the selected sample of Zbot infects the system with ID CLSID, which is similar to the ID of malware.

New Mac malware bypassed OS X Gatekeeper protection

The company Intego, Mac-specialized producer of antivirus today reported the discovery of a new malware-based computers Apple.

According to the company, the new Mac-malware already managed to infect the computers of employees Apple, Facebook, Twitter, and a number of others, including the government, American institutions. It is reported that among the victims of the malware is Mac-and one of the three major U.S. automakers.

Malware Pintsized.A represents a new class of malicious programs Mac-using a previously unknown vulnerability in the built-in Mac OS X Security Tools Gatekeeper. Originally utility Gatekeeper is designed for monitoring of installed programs and lock the file system from unauthorized installations. However, a new malicious software disguised as CUPS, used in Linux and Mac to control printing documents. In this case, careful Mac-user may notice that the pseudo-CUPS tries to install the system in a folder that has no relation to the legitimate CUPS.

New technology bootkit counteraction

Kaspersky Lab: New technology bootkit counteraction

Special malicious programs that are downloaded to the operating system and antivirus software (called bootkits), represent one of the most serious threats to your computer.

Often they are able to hide their presence in the computer and operate imperceptibly, not only for the user, but also the security software. New technology can detect activity traces bootkit and effectively oppose him.

Kaspersky Lab patent describes a method for detecting unknown malicious programs using emulation boot. In case of suspicious changes in the MBR (Master Boot Record, MBR) technology allows you to collect data from the disk sectors involved in the loading, puts them in a special container that preserves the physical parameters of the disk to its exact emulation, and then transmits the Kaspersky Lab for analysis.

The company's specialists reproduces the process of loading the user's computer, analyze the contents of the container received in the case of detection of unknown threats create the proper signatures, separated from the data sent by the original MBR to restore system and take other necessary measures to prevent the bootkit.