Skip to main content

Woburn, MA – July 21, 2014 - In June, Kaspersky Lab registered an increase in fraudulent messages sent to mimic travel booking services and notifications from Electronic Arts, all to gain access to consumer personal account information. The fake notifications imitate hotel booking confirmations or air tickets and usually contain Trojan spyware masked as bills for reservations. Phishers also used fake notifications from the U.S. video game maker Electronic Arts in an attempt to access users’ personal accounts in the company’s online store Origin.

As a rule, fraudulent messages imitating correspondence from booking services contained the Ursnif Trojan that steals confidential data and sends it to a remote server. It can listen to network traffic, download and run other malicious programs, as well as disable some system applications such as the firewall. The phishers who tried to access the personal accounts for Electronic Art’s Origin online store sent out an email saying the online store was enhancing account protection and asked the recipients to confirm they held an account.

In addition, Kaspersky Lab detected the following statistics on spam during the month of June:

  • Percentage of spam in email traffic averaged 64.8 percent, which was five percentage points less than in May.
  • Top three sources of spam around the world in June were the US (13.2%), Russia (7%) and China (5.6%).
  • Germany saw a big surge in the number of antivirus detections, doubling the previous month’s share to 16.4 percent, taking the top spot from the UK. The US remained in second place on 9 percent.

Once again topping the list of malware spread by email was Trojan-Spy.HTML.Fraud.gen. This threat appears as an HTML phishing website and sends email disguised as an important notification from banks, online stores, and software developers. Trojan-Downloader.MSWord.Agent.z was in second place. This malicious program is a *.doc file with embedded macros that downloads and runs other malicious program. In third place was a Trojan downloader from the Bublik family – it’s main functionality is the unauthorized download and installation of new versions of malware onto victim computers.

Phishing

Email search sites (32.1%) again topped the rating of organizations most frequently attacked, with a slight drop of 0.2 percentage points from the previous month. Second came Social networks (27.7%), with an increase of 3.7 percentage points compared to May. Financial and payment organizations (11.6%) and Online stores (10.6%) declined by 1.2 and 1.5 percentage points respectively. The proportion of attacks targeting Telephone and Internet service providers fell by 0.1 percentage points leaving this category in fifth place in the rating.

Quote:
Tatyana Shcherbakova, Anti-Spam Analyst
Kaspersky Lab
“In June, high-profile political and sporting events were used by scammers to trick users. In the run-up to the FIFA World Cup, a huge event for football fans, phishers were trying to obtain banking information from users by asking them to participate in the competition to win tickets. ‘Nigerian’ scammers again exploited the situation in Ukraine and asked for help to transfer non-existent millions.”

The full report is available at securelist.com

About Kaspersky Lab
Kaspersky Lab is the world’s largest privately held vendor of endpoint protection solutions. The company is ranked among the world’s top four vendors of security solutions for endpoint users*. Throughout its more than 16-year history Kaspersky Lab has remained an innovator in IT security and provides effective digital security solutions for large enterprises, SMBs and consumers. Kaspersky Lab, with its holding company registered in the United Kingdom, currently operates in almost 200 countries and territories across the globe, providing protection for over 300 million users worldwide. Learn more at www.kaspersky.com.

For the latest in-depth information on security threat issues and trends, please visit:

Securelist | Information about Viruses, Hackers and Spam
Follow @Securelist on Twitter

Threatpost | The First Stop for Security News
Follow @Threatpost on Twitter

Media Contact
Sarah Bergeron
781.503.2615
sarah.bergeron@kaspersky.com

* The company was rated fourth in the IDC rating Worldwide Endpoint Security Revenue by Vendor, 2012. The rating was published in the IDC report "Worldwide Endpoint Security 2013–2017 Forecast and 2012 Vendor Shares (IDC #242618, August 2013). The report ranked software vendors according to earnings from sales of endpoint security solutions in 2012.

Kaspersky Lab Detects Travel-Related Fraudulent Messages in June 2014 Spam Report

Kaspersky Lab Detects Travel-Related Fraudulent Messages in June 2014 Spam Report
Kaspersky Logo