Read more>>

Threats and Trends Februari 2009

(Stockholm 2009-03-03)

The alert statistic shows that most alerts occur in intra LAN this time, mostly because several of the customers which this statistics is based on have been infected by the Downadup/Conficker virus. In other words, these alerts are registered as severe. Incidents reported for Intra LAN have also increased as a result of the virus.

There has been a slight increase in the number of reconnaissance attacks. We see, however, that the level is not abnormally high. The traffic mostly targets well known Microsoft ports. Some of these ports may be used for the Downadup virus.

Among spam/worm we continue to see an increase in the traffic towards port 445. This is due to the Downadup worm targeting this port

Focus of The Month:

DOWNADUP/CONFICKER

Threats and Trends is produced by personnel in Secode's Operations Centre, and the report is based upon events registered during the specified period. The report contains events deemed to be of public interest, as they are registered by Secode and the vaious sensors and observation points in different networks. All specific and identifiable information about companies and Secode customers is removed in this report. The reports are published on these pages monthly. The reports only contain observations, and Secode will not accept any responsibility for interpretations, theories or conclusions based on this material by any third party. No further comments on material presented in the reports will normally be given by Secode.

Copyright Secode AB 2007 - 2009.