Media releases are provided as is by companies and have not been edited or checked for accuracy. Any queries should be directed to the company itself.

The Church of Trojan Graced Fortinet’s Most-Reported Threats for March 2008

  • 02 April, 2008 11:48

<p>Fortinet® - the pioneer and leading provider of unified threat management (UTM) solutions - today announced the top 10 most reported high-risk threats for March 2008.</p>
<p>Sundays may be a day of rest and worship for many, but the Pushdo.EV Trojan malware was not honoring the Sabbath this past month. Fortinet threat researchers witnessed a spike in activity over four consecutive Sundays -- from February-end to March-end -- propelling the Pushdo variant to the top threat spot. Pushdo.EV grabbed an impressive 13.5 percent of all malware activity for the month, which allowed the Trojan family as a whole to claim credit for nearly one-third of the total number of threats observed.</p>
<p>“Activities in the last month showed the strength of the Pushdo botnet, which is a clear indicator that the socially-engineered mass e-card approach continues to gain traction,” said Derek Manky, security research engineer for Fortinet. “Consumers should be reminded that legitimate e-cards are not generally sent as attachments, but rather as links to a hosting Web site. And as a rule of thumb, we should all avoid opening attachments from unsolicited emails.”</p>
<p>With intelligence gathered from Fortinet’s FortiGate™ multi-threat security systems in production worldwide, the FortiGuard™ Global Security Research Team observed the following broad trends for the month:</p>
<p>• Pushdo.EV rose to the top of the list by sending out animated cards that enticed recipients with the promise of nude photos attached;</p>
<p>• Parasitic file infector, Virut.A, wins the award for steepest climb up the chart, landing in fourth place from its 29th position in the previous edition of this report;</p>
<p>• MyTob and MyDoom families continue consistent activity with four variants in the Top Ten list.
Following are the Top Ten individual threats, Top Five threat families and Top Five threat prevalence for March. Pushdo’s influence in all three lists was clearly evident. Top 100 shifts indicate positional changes compared to February’s Top 100 ranking, with “new” representing the malware’s debut in the Top 100.</p>
<p>Top Threat Prevalence</p>
<p>Thanks to Pushdo.EV, the Trojan family made up nearly one-third of all malware activities for the month.</p>
<p>Rank Malware Family Percentage
#1 Mass mailer 39.0%,
#2 Trojan 32.2%,
#3 Exploit 7.5%,
#4 Spyware 5.0%,
#5 Mobile 0.3%.</p>
<p>Top Ten Individual Threats
Rank Threat Name Threat Type % of Detections
#1 W32/Pushdo.EV!tr.dldr Trojan 13.5%,
#2 W32/Netsky!similar Mass mailer 9.5%,
#3 HTML/Iframe_CID!exploit Exploit 6.5%,
#4 W32/Virut.A Virus 4.3%,
#5 W32/MyTob.BH.fam@mm Mass mailer 1.9%,
#6 W32/MyTob.FR@mm Mass mailer 1.9%,
#7 W32/Bagle.DY@mm Mass mailer 1.7%,
#8 W32/Mydoom.N@mm Exploit 1.6%,
#9 W32/MyTob.fam@mm Mass mailer 1.5%,
#10 W32/Istbar.PK!tr.dldr Trojan 1.5%</p>
<p>Top Five Families</p>
<p>Netsky continues its leadership position among malware families, but fierce competition from Pushdo’s Sunday activities closed the gap to less than one percent.</p>
<p>Rank Malware Family Threat Type Percentage
#1 Netsky Mass mailer 14.5%,
#2 Pushdo Trojan 13.7%,
#3 MyTob Mass mailer 9.5%,
#4 Virut Virus 4.7%,
#5 MyDoom Mass mailer 3.6%.</p>
<p>To read the full March report, please visit:</p>
<p>For ongoing threat research, bookmark the FortiGuard Center ( or add it to your RSS feed by going to To learn more about FortiGuard Subscription Services, visit</p>
<p>About Fortinet (
Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California.
Copyright © 2008 Fortinet, Inc. All rights reserved. Fortinet is a registered trademark of Fortinet, Inc. FortiGate, FortiOS, FortiAnalyzer, FortiASIC, FortiCare, FortiManager, FortiWiFi, FortiGuard, FortiClient, FortiReporter and other names are trademarks of Fortinet, Inc. in the United States and/or other countries. All other trademarks referred to herein are the property of their respective owners.</p>
<p>Media contact:
Sebastian Rice
02 9959 1991</p>

Most Popular

Editor's Recommendations

Solution Centres


View all events Submit your own security event

Latest Videos

More videos

Blog Posts

Media Release

More media release