MCAFEE对熊猫烧香作者被抓获的报道

ouran

W32/Fujacks: Panda Malware Breeders ArrestedMonday February 12, 2007 at 10:13 am CST
Posted by Geok Meng Ong
Today, Xinhua News Agency reported the arrest of several suspects believed to have been behind the creation and propagation of the W32/Fujacks file infector worm a.k.a infected files with the Panda icon.

In the article, the official Chinese media cited an announcement from the Public Security Department of the Hubei Province naming 8 suspects including a 25-year old believed to be “WhBoy”, the infamous nickname that is embedded in most variants of [url=]W32/Fujacks[/url].
Xinhua’s article in Chinese:
http://news.xinhuanet.com/legal/2007-02/12/content_5731540.htm
Throughout 2006 and continuing into 2007, McAfee Avert Labs has been closely monitoring the trends of cyber criminal activities in Asia. [url=]W32/Fujacks[/url], amongst other profit-motivated multi-vector attacks, spiked in 2006 and looks to be a trend that will continue in 2007.

Between Q3 and Q4 2006, we saw a spike in the number of reported variants of Asian password-stealers and related trojans and file infectors. We blogged about this phenomenon with [url=]W32/HLLP.Philis[/url] variants in November 2006. What is really beyond these raw figures however is the increasing sophistication of Asian malware threats.
Both [url=]W32/HLLP.Philis[/url] and [url=]W32/Fujacks[/url] are more than the usual file infectors. These are multi-vector threats, usually including an aggressive downloader that updates itself frequently, can infect both executable and non-executable files over insecure media such as open network shares and USB drives, thus slipping through the cracks of loosely managed IT policies. Once successful, trusted media files can be further infected with malicious code or hyperlinks through PE file infection, web-based exploits over HTML or media files targeted against unpatched and vulnerable applications.
This approach of attacks on multiple system and user vulnerabilities at multiple layers dramatically increases the criminal opportunities for these malware authors. Indeed, we have seen a comparable rise in number of associated password-stealer variants reported - a considerable source of revenue for the worm seeders.
The lack of law enforcement in China in cyber crime has often been attributed for the rise in malware threats propagating from this region. It is encouraging to see the start of what appears to be the end of the first major case of cyber crime in China with these arrests. At the same time, enterprises need to consistently review and tighten up their current IT strategies to protect against the sophisticated attacks of today.

deane_tiantian

又现英文，翻译过来了再看，真累啊

Oceanzd

汗。。。又在讲全球病毒趋势。。。

冷杉

MCAFEE 对熊猫烧香作者被抓获的报道


W32/Fujacks: 熊猫 Malware 养育者 ArrestedMonday 2007 年二月 12 日在中部时间早上 10:13
被 Geok Meng Ong 寄
今天，新华社一些嫌疑犯的逮捕相信已经在创造后面，而且 W32/ Fujacks 文件传播者虫 a.k.a 的增殖用熊猫圣像传染文件。

在文章中，官方的中国媒体引证了来自湖北省的公安部门的一个公告取名包括的 8个嫌疑犯一 25 岁的相信是 "WhBoy" ，正在 W32/Fujacks.
华语的新华社的文章:
http:// news.xinhuanet.com/legal/2007-02/12/ content_5731540.htm
到处 2006 而且继续进入 2007之内, McAfee 避免中心已经接近地监听网际的趋势亚洲的犯罪活动。[url=]W32/Fujacks[/url],在其他的利润给与动机的多矢量攻击当中, 在 2006 年以大钉钉牢而且看是一个在 2007 年将会的趋势.

在 Q3 和 Q4 2006 之间，我们看见了亚洲的密码- stealers 和相关的 trojans 和文件的变体数字传播者的一支长钉。 我们 blogged 有关和 W32/HLLP.Philis在 2006 年十一月的变体. 什么真的是超过这些生的身材然而是亚洲的 malware 威胁的逐渐增加的诡辩。
[url=] W32/HLLP.Philis[/ url] 和[url=] W32/Fujacks[/ url] 都不只是平常的文件传播者。 这些是多矢量威胁, 通常包括一攻击性的下载那时常更新它本身,能传染在不安全的媒体 , 像是开着的网络部份上的既可运行的且非可运行的文件和万用串列总线推进力,松弛地处理它政策如此从裂缝溜走。一经成功的, 信赖的媒体文件可能被经过 PE 文件传染以怀恶意的密码或超链接更进一步传染,在 HTML 或反对不补缀被对准的媒体文件和易受伤害的申请上的网络功绩。
对多样的系统和使用者易受伤的攻击这方式在多样的层戏剧地为这些 malware 作家增加犯罪的机会。 的确，我们已经看到联合的密码一个在数字方面的可比较的提高- 偷变体 - 为虫播种者的收入一个相当的来源。
网际罪行的中国执法的缺乏时常已经被归于为在 malware 威胁方面的提高从这一个区域繁殖。 它正在鼓励似乎是和这些逮捕的中国网际罪行的首先主要的情形结束的东西开始。同时，企业在他们的涌流上面一致地检讨而且勒紧它策略保护对抗今天的复杂攻击。

windlau78

熊猫也算红极一时。