Kaspersky080606

Virus IndustryvsAnti-Virus Industry: 

Virus Industry vs Anti-Virus Industry Natalya Kaspersky CEO of Kaspersky Lab natalya@kaspersky.com

Computer crime today (1): 

Cyber blackmail (DDoS, hijacking) Trojan-dialers (premium numbers) Theft of virtual property (online games, gambling, web-money) Adware (pop-up banners, trojan-downloaders) Pornware (dialers, downloaders) All via PCs, LANs, mobiles, PDAs Computer crime today (1)

Illustration: Virus.Win32.GPCode: 

The virus uses the RSA algorithm to encrypt files. Image Copyright © Kaspersky Lab Illustration: Virus.Win32.GPCode

Computer crime today (2): 

Financial fraud: Online bank Trojans Phishing Pharming Nigerian letters Computer crime today (2)

Illustration: credit card data theft: 

Image Copyright © Kaspersky Lab Illustration: credit card data theft

Illustration: Pharming: 

Image Copyright © Kaspersky Lab Illustration: Pharming

Illustration: a Nigerian letter: 

Dr. Bakare Tunde Astronautics Project Manager National Space Research and Development Agency (NASRDA) Plot 555 Misau Street PMB 437 Garki, Abuja, FCT NIGERIA Dear Mr. Sir, REQUEST FOR ASSISTANCE-STRICTLY CONFIDENTIAL I am Dr. Bakare Tunde, the cousin of Nigerian Astronaut, Air Force Major Abacha Tunde. He was the first African in space when he made a secret flight to the Salyut 6 space station in 1979. He was on a later Soviet spaceflight, Soyuz T-16Z to the secret Soviet military space station Salyut 8T in 1989. He was stranded there in 1990 when the Soviet Union was dissolved. His other Soviet crew members returned to earth on the Soyuz T-16Z, but his place was taken up by return cargo. There have been occasional Progrez supply flights to keep him going since that time. He is in good humor, but wants to come home. In the 14-years since he has been on the station, he has accumulated flight pay and interest amounting to almost $ 15,000,000 American Dollars. This is held in a trust at the Lagos National Savings and Trust Association. If we can obtain access to this money, we can place a down payment with the Russian Space Authorities for a Soyuz return flight to bring him back to Earth. I am told this will cost $ 3,000,000 American Dollars. In order to access his trust fund we need your assistance. Illustration: a Nigerian letter

Recent IT threats trends : 

Fast growth: Online bank Trojans Theft of virtual property (online games) Stable growth: Cyber blackmail (DDoS, hijacking) Trojan-dialers (premium numbers) Adware (pop-up banners, Trojan-downloaders) New evolving types: Stealth technologies (aka Rootkits) Pharming Recent IT threats trends

Number of antivirus signatures: 

Number of antivirus signatures Source: Kaspersky Lab

Trends in malware development: 

The aim is money! New techniques: distribution: Web, IM, “hard copies” - CDs social engineering Fight against antivirus vendors Local epidemics, not global Targeted attacks against chosen enterprises or governments Conclusion: It is becoming more difficult to resist organized crime in cyberspace Trends in malware development

How do they earn money?: 

How do they earn money?

How do they earn money?: 

How do they earn money?

How do they earn money?: 

How do they earn money?

Virus industry vs Anti-Virus industry: 

Generating many samples in a short time Using stealth technologies (aka Rootkits) Fooling heuristic scanners Terminating AV processes Terminating AV updates Implementing different compression methods Inventing different encryption methods Virus industry vs Anti-Virus industry Conclusion: AV technologies must be constantly updated and delivered to users ASAP

Illustration: malware blocks AV vendors sites: 

Image Copyright © Kaspersky Lab Illustration: malware blocks AV vendors sites

Anti-Virus industry vs Virus industry: 

Reactive methods – Virus Conveyor Anti-Virus industry vs Virus industry Proactive technologies

Anti-Virus industry vs Virus industry: 

Anti-Virus industry vs Virus industry Reactive methods – Virus Conveyor Proactive technologies

Anti-Virus industry vs Virus industry : 

Making effective and quick malware assembling Setting effective procedure of initial malware analysis Fielding more people to analyze new malware (Trojan, virus, etc.) Creating tools to proceed automatic virus analysis Constantly inventing new technologies Anti-Virus industry vs Virus industry AV industry can resist cybercriminals by: Conclusion: In this constant fight the fastest reaction to new threats is mission critical!

Why Kaspersky?: 

Effective conveyor of malware analisys 15 years expierence Best experts in the industry The largest number of supported packing and archived formats Hourly updates Fastest in the AV industry reaction time to the new threats Why Kaspersky?

The Industry’s OnlyHourly Updates!: 

The Industry’s Only Hourly Updates! Source: Vendors’ Data

Slide21: 

Awards Over 250 awards globally

Reaction Time: 

Reaction Time Source: AV-Test.org Research Group, Magdeburg University

Slide23: 

Thank you. Read more: www.viruslist.com www.kaspersky.com Questions: natalya@kaspersky.com