May Stats From Kaspersky

The May virus situation is a throwback to the end of 2005, with Netsky, Bagle and Sober once again the most widespread malware.

This flashback is not a complete surprise. Netsky.t and Netsky.q, which occupy first and second place respectively, have both been widespread for some time, while Bagle.gt recently has been moving steadily up the table. More unexpected, however, was Sober.aa taking fourth position. The first samples of this worm were detected by Kaspersky Lab on 7 April 2007. This may not seem very significant, but the previous version of this worm, Sober.z, dates back to the middle of November 2005.

Sober.z was one of the most widespread worms of its time. It seemed back then that the German police were hot on the unknown author's tracks, and that an arrest would be imminent. Nothing happened, however, and a new version of this old email worm has been released perhaps by somebody who is not the author of the original worm. The result is clear: Sober.aa, a primitive worm, has been able to squeeze out worms with far more advanced functionality, and it may well climb higher in the ratings in months to come.

Phishers have been less active in May than in the previous two months. However, this is probably a temporary phenomenon.

This is the list:

1. Email-Worm.Win32.NetSky.t - 15.3 per cent
   
2. Email-Worm.Win32.NetSky.q - 14.8 per cent
   
3. Email-Worm.Win32.Bagle.gt - 13.5 per cent
   
4. Email-Worm.Win32.Sober.aa - 11.9 per cent
   
5. Worm.Win32.Feebs.gen - 6.5 per cent
   
6. Email-Worm.Win32.NetSky.aa - 5.4 per cent
   
7. Net-Worm.Win32.Mytob.c - 3.3 per cent
   
8. Trojan-Downloader.Win32.Agent.bqs. - 2.4 per cent
   
9. Email-Worm.Win32.Scano.gen - 2.2 per cent
   
10. Email-Worm.Win32.NetSky.b - 2.2 per cent

Others - 22.5 per cent

Related links: (Open in a new window.)
www.kaspersky.com
www.viruslist.com

Taken from Information Security Bulletin.