Mobile Malware, Ransomware, Signed Binaries on the Rise, McAfee Finds

by Sean Michael Kerner

Malicious binaries increased over the course of 2013, particularly during the fourth quarter, McAfee Labs observed attackers digitally signing their code in an effort to trick users into thinking it was legitimate.

Mobile malware continues to be a growing concern, though McAfee Labs reported fewer new mobile malware samples in the fourth quarter of 2013 than during the fourth quarter of 2012.

Mobile malware has many different behaviors. The top behavior is to simply collect and send device telemetry and information without the mobile user’s knowledge or authorization.

Malware that holds users’ devices hostage for ransom (hence the term “ransomware”) became a significant problem in 2013. McAfee Labs reported that new ransomware samples doubled year-over-year in the fourth quarter.

Not all forms of malware are growing. McAfee Labs reported that rootkit malware—which is activated at the time an operating system boots up—is on the decline. In the fourth quarter, Rootkit malware declined 73 percent year-over-year.

According to McAfee Labs, the leading targets for network-based attacks are Web-browser vulnerabilities.

When it comes to identifying the location of where phishing and spam Web addresses are located, the U.S tops the list.

While the U.S. is the top nation for spam-hosting Web addresses, the Cutwall is the most prevalent spam botnet followed closely by Kelihos.