Virus writers get stealthy

Virus writers are turning to new tricks as the trend of big-hitting worms eases off in favour of malware that can slip in under the radar.

Security researchers have warned that sudden impact viruses, such as the Slammer worm, which cause immediate widespread damage to IT systems are being superseded by slow-burning worms where the focus is on avoiding detection.

According to F-Secure, virus writers are putting more time into making their viruses stealthy in an attempt to sneak them past antivirus software. Malware authors, many of whom now use viruses as a way of making money, are regularly testing their viruses against antivirus packages, said Mikko Hyppönen, director of antivirus research for F-Secure.

"Because virus writers make money from viruses they can test them to a professional level," said Hyppönen. "None of the existing antivirus programs will find these viruses. You can't see anything in the registry, which makes them hard to detect. They try to hide their processes."

Slammer managed to infect 90 percent of vulnerable hosts within 10 minutes of being released as it raced around the Web, disrupting IT networks worldwide. But because the worm caused such damage, most IT staff were quick to patch against it.

Hyppönen said that no one has seen a really hard-hitting worm since May last year and believes this is because virus writers have changed their approach. Many new viruses attempt to install key loggers that can record passwords and personal details, according to Hyppönen, so by attracting less attention the viruses should be more successful.

Mass-mailing worms Bagle, Sober and Netsky all created or manipulated botnets â€" thousands of compromised computers networked, typically for malicious use. Hyppönen said that so far no slow-burning worms have been found to have this capability.

ZDNet UK's Dan Ilett reported from London. For more coverage from ZDNet UK, click here.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • Array Can complaints on mobile content be cut?
    On 1 July this year the new Mobile Premium Services Code was introduced. It sounds like it's had a good impact, but is it enough?
  • Array NZ farmers: Bleating about broadband
    As we know, farmers are such bleaters. They bleat as much as the four-legged woolly things in their paddocks. If it's not the weather, it's the strength of the dollar! Nothing is ever right. Likewise with rural broadband.
  • More blogs »

Tags

Back to top

Featured