Click to edit Master title style

1. Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level Alexander Gostev Director, Global Research and Analysis Team Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010 June 10th, 2009 Event details (title, place)

2. Cyberthreat Landscape in 2009 Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place)

3. 2009 – Main Trend Click to edit Master title style Relative stability replaces massive increases in the amount of new malware • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level The number of new malware samples, detected year over year Source: Kaspersky Lab June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

4. 2009 – Malware Numbers in Review Click to edit Master title style • 1992 – 2007 > detected about 2 mln • unique malware programs • But in 2008 alone – 15 mln • In 2009 - about 33,9 mln unique • malicious files in the Kaspersky Lab • collection • 2009: 15 mln new files again (same as 2008 – flat growth rate) • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

5. Reasons for the Stable Growth Click to edit Master title style • The pace of malware development slowed significantly • Increased competition in the malware market • abig decline in gaming Trojans • The successful work of: • law enforcement • regulatory structures • and the antivirus industry • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

6. Outcomes in 2009 Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place)

7. Sophisticated Malware Click to edit Master title style • An increase in sophisticated malicious programs • Sinowal • TDSS • Clampi • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

8. Global Outbreaks Click to edit Master title style • The following malicious programs affected more than 1 million computers in 2009: • Kido (worm) • Sality (virus) • Brontok (worm) • Mabezat (worm) • Parite.b (virus) • Virut.ce (virus-bot) • Sohanad (worm) • TDSS.z (rootkit) • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

9. Kido - Conficker Click to edit Master title style • Kido epidemic – all of 2009 • November 2009 – over 7 mln infected systems • Conficker Working Group - the first example of broad • international cooperation • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level Source:www.shadowserver.org June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

10. Gumblar – a Self-Spreading Website Botnet • Significant outbreak - hit tens of thousands of web • resources • Came in waves Gumblar tiers Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

11. Gumblar – a fully automated system Click to edit Master title style • Evolution: • Visitors to legal websites re-directed to infected illegal malicious servers. • Users re-directed from legal websites to infected, but legal websites. • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

12. Internet based fraud - SMS Click to edit Master title style • Websites offering services: • Locate people via GSM • Read private messages in social networks • Collect data, and more • SMS can cost up to $10 • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

13. Internet Based Fraud – Fake AV Click to edit Master title style • Fake AV boom – spread via: • Internet ads • Malware such • as Kido • Fake AV revenues in 2009 - 150 mln. USD* • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level *Source: Internet Crime Complaint Center June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

14. Alternative Platforms – Mac OS Click to edit Master title style • The first Trojan - OSX.RSPlug.A (Trojan-Downloader.OSX. Jahlav) • The first rogue AV solution - Imunizator • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

15. Alternative Platforms - Mobile • First malicious programs for iPhone • (Ike worms) • First piece of spyware for Android (Mobile spy) • First crypto-signed malware for Symbian Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

16. Alternative Platforms –ATMs Click to edit Master title style • The first Backdoorfor ATM – Backdoor.Win32.Skimer • Stole money • Stole credit card data • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

17. Forecasts for 2010 Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place)

18. Change in Attack Vector Click to edit Master title style • Attacks via email; • Internet/network attacks; • Attacks via websites (including social networks) • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level 2010 - a significant increase of attacks via file-sharing networks - P2P and torrents June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

19. Growing complexity Click to edit Master title style • Malware will become much more sophisticated • IT security companies develop even more complex protection tools • Immune malware • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

20. Attacks on Google Wave Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level • Usual pattern • Sending spam • Phishing attacks • Exploiting vulnerabilities • and • Spreading malware June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

21. Alternative Platforms - Mobile Click to edit Master title style • Rise in mobile threats for iPhone and Android • Android - no effective checks in place to ensure third-party software applications are secure • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place) Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

22. AV industry trends Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level June 10th, 2009 Event details (title, place)

23. In-the-Cloud Security • Technological advance • Protects users • BUT • Potential IP abuse • Will be attacked Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

24. International Collaboration • AV + educators, law enforcement, • ISP & so on • AV vendors educate about security • AV vendors help solve cybercrime • Results: • IT security awareness • Conficker Working Group Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

25. Summary: Forecasts for 2010 • Kido remaining an active global epidemic • Significant increase of attacks through P2P networks • Emergence of more "grey" schemes in the botnet services market • Attacks via Google Wave • Rise in mobile threats for iPhone and Android Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010

26. Director, Global Research and Analysis Team Thank you! Questions? Click to edit Master title style • Click to edit Master text styles • Second level • Third level • Fourth level • Fifth level Alexander Gostev Kaspersky Lab International Press Tour “Cyberthreat Landscape 2009: Outcomes, Trends and Forecasts”, Moscow, January 28-31, 2010 June 10th, 2009 Event details (title, place)