Symantec: Botnets on the rise in Asia

By Vivian Yeo, ZDNet Asia
23 September 2005 07:27 AM
Tags: virus, trojan, attack, ddos, army, bot, zombie, symantec
update More computers in the Asia-Pacific region are being hijacked and used remotely by hackers to send viruses, according to a recent study by security vendor Symantec.

The number of such "bot infected" systems in China alone grew more than 140 percent in the first six months of 2005, compared with the same period last year, said Adrian Tham, Symantec's systems engineer manager for Southeast Asia.

But despite the increasing number of bot-infected computers in Asia, they made up less than 20 percent of the total number of compromised systems worldwide, he said.

Edward Lam, Symantec's general manager for Singapore, noted that there has been an increase in "botnets" across the globe. According to the company's eighth biannual Internet Security Threat Report, the number of "bots" during the first six months of this year increased to 10,352 a day, from fewer than 5,000 in the second half of 2004. The data was derived from readings from more than 24,000 sensors located worldwide.

Botnets are groups of compromised PCs, often numbering in the thousands per network, that are rented out to relay spam, to launch denial-of-service attacks, or to perform other malicious acts.

Three Asian cities -- Seoul, Beijing and Taipei -- were ranked among the top 10 cities worldwide in the number of hijacked systems. Seoul made up 24 percent of infected computers in the Asia-Pacific region, while Beijing and Taipei represented 17 percent and 14 percent respectively.

At least two countries, Korea and Japan, have seen a rise in broadband penetration, something that Tham suggested was behind the increase in compromised systems.

Denial-of-service attacks, a primary function of bot-infected networks, grew by more than 680 percent during the first half of the year. The average number of attacks increased to 927 attacks per day, compared with an average of 119 attacks per day during the months of June to December 2004.

Leading attack
According to Symantec's report, the top attack in the Asia-Pacific region during the first six months of the year was a DoS attack known as the Generic TCP SYN Flood. This contrasted with the global scenario, where the Slammer worm has occupied the top attack spot for the past four reporting periods.

In addition, information taken from sensors located across the region showed that many countries in the Asia-Pacific were the host of security attacks in this region.

The United States was the leading host of attacks against infected systems in the Asia-Pacific, accounting for 42 percent of the total, Symantec found. Australia, China, Taiwan, Singapore, Hong Kong, the Philippines and South Korea also made it to the top 10 list.

Tham noted that Symantec expects the number of botnets to increase over the next year, and warned that attacks would likely become more sophisticated.

Vivian Yeo of ZDNet Asia reported from Singapore.

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Brad Howarth The key Topik is always money
    One of the big problems of the internet is that is practically impossible to keep up-to-date on preferred topics. You can limit your sources, but this can mean missing a lot of valuable data.
  • Array Google open-sources JavaScript tools
    Google announced overnight the release and open-sourcing of a trio of tools designed to help JavaScript developers.
  • Array Do we need the legislative blackmail?
    Virtually everyone in the telecommunications industry has their say in the Senate Standing Committee's public hearing into the pending legislation to split up Telstra, in this week's Twisted Wire podcast.
  • More blogs »

Tags

Back to top

Featured