Internet Threat Report. Symantec has just released its twice-yearly Internet
Security Threat Report. This contains plenty of interesting data from the
perspective of Symantec's Security Response team. Well, "interesting"
if you're interested in that sort of thing...
some highlights (percentage changes are over a six-month period):
half of identity thefts are caused by loss or theft of laptops and other hardware
containing personal data.
attacks are down about 20%.
activity is up by about 10% (in terms of number of active zombies).
hosted about one-quarter of these zombies -- more than any other single
U.S. hosted about 40% of the botnet command-and-control nodes.
vulnerabilities (e.g., in Windows or Web applications) are up about 10%.
system vendors are taking "longer" to patch vulnerabilities
(no quantitative data disclosed).
Stration family of worms was the most widely reported.
is still the most-used vector for propagating viruses and other malware --
at about 75%.
is up 5% in terms of numbers of campaigns, and about 20% in terms of volume.
attacks are more likely to be sent on a weekday than on the weekend.
kiting and other financial services spam represent about a third of all spam.