Changing web threats highlight core security concerns for Trend Micro

Whereas the computer viruses of old were designed to produce spectacular crashes and widespread annoyance, today's threats work undetected to steal data and facilitate fraud.

The month of July saw inventive applications of malicious software launched across the world, taking advantage of events as diverse as the rapid spread of iPhone since its debut and a new Harry Potter film adaptation and book.

"July was a busy month for new web threats, but solutions were at hand," said Samir Kirouani, Technical Manager, Trend Micro Middle East and Africa.

"The exemplary work of TrendLabs in rapidly identifying these problems and disseminating warnings has been a key part of this process," he added.

Notable summer malware included TROJ_AYFONE.A., a Trojan opening a popup window and redirecting a user's browser to a fake iPhone shop, in order to facilitate ID theft. The IPhone itself faces potential problems, thanks to vulnerabilities in the Safari browser bundled with it. Once exploited, hackers obtain remote user access to execute code on the device.

Other researchers into iPhone vulnerabilities determined the passwords used to obtain mobile access. As Apple products become more popular, they are falling foul of more and more exploits and bugs.

July began with fake 4 July greeting cards being emailed to potential victims, containing versions of WORM_NUWAR. Meanwhile BKDR_FONAMEBOT.A was installed in compromised DNS servers. A "concept backdoor', this malware can be used by remote malicious users to cover their tracks.

Other July web threats included TROJ_BANLOAD.CGL which emailed promises of footage of a Brazilian aeroplane accident, only to download spyware onto the systems of those looking for the video clip. Further ghoulish problems came from WORM_HAIRY.A., a worm cashing in on the popularity of Harry Potter, often advertised with the words "Harry Potter is dead".