





Outbreak Alert
Most Active New Threats
| Name | Type | Discovered |
| SecShieldFraud!gen7 | Misleading Application | 05/25/2012 |
| W32.SillyFDC.BDQ | Worm | 05/25/2012 |
| Trojan.Exprez | Trojan | 05/23/2012 |
| Downloader.Jadelile | Trojan | 05/22/2012 |
| Trojan.Ransomlock.P | Trojan | 05/22/2012 |
| Packed.Dromedan!gen5 | Trojan Virus | 05/21/2012 |
| Trojan.Komodola | Trojan | 05/18/2012 |
| W32.Stekct | Worm | 05/17/2012 |
| Packed.Generic.368 | Trojan Worm | 05/17/2012 |
| Packed.Generic.367 | Trojan Worm | 05/16/2012 |
Internet Threat Meter
The Internet Threat Meter provides a quick visual indicator of how likely each common online activities is likely to encounter some form of threat from a malicious attacker.
- Hover over each activity for a short explanation of the current risk level
- Click on an activity to visit a page with more detail on that activity and the risk level

Email
LOW RISK:
Use Basic Caution
Malicious code and fraudulent messages often circulate via email. Never open unsolicited attachments or hyperlinks, and always verify the source of any messages that ask you for sensitive information.
Web Activities
LOW RISK:
Use Basic Caution
Although no widespread attacks are currently targeting web users, take normal precautions while viewing sites because of ongoing threats such as script-based attacks and phishing attacks that use fake sites.
Instant Messaging
LOW RISK:
Use Basic Caution
Currently there are no widespread outbreaks of malicious code circulating via instant messaging. In the past, however, some malicious code did take advantage of IM. Always use normal security precautions whenever you use IM.
File Sharing
LOW RISK:
Use Basic Caution
Although attackers often use this medium to distribute trojan applications and malicious code, no high-profile threats are currently affecting the medium. Always use caution when downloading files, especially from sources you don’t know or trust.
Security Response Blog
Flamer: Highly Sophisticated and Discreet Threat Targets the Middle East
Symantec Security Response @ Mon, 28 May 2012 15:32:58Over the past few days, we have been analyzing a potential new threat that has been ...
Strange Case of W32.Xpaj.B: Patient Zero
Andrea Lelli @ Thu, 24 May 2012 23:55:40A number of days ago, we observed a new variant of the W32.Xpaj.B virus and we ...
Tibetan-Themed Malware Subverts a Legitimate Application
Symantec Security Response @ Thu, 24 May 2012 14:12:33Analysis by: Hiroshi Shinotsuka Recent malware campaigns that used Tibet-related issues as bait have been well ...
ZTE Score: Privilege of Escalation in a Nutshell
Val S @ Thu, 24 May 2012 01:08:34Contributor: Branko Spasojevic read more ...
Not Allowing Spammers the Slightest Space
Paresh Joshi @ Mon, 21 May 2012 13:52:55For anti-spam software, it is quite easy to prevent spam by using content-based filters. So spammers ...
Worm Posts on SNS Sites and Wipes out Rivals
Takashi Katsuki @ Fri, 18 May 2012 23:24:20W32.Wergimog is a worm that attempts to spread through removable drives and opens a back door. ...
Twitter Feed





Threat Spotlight
Trojan.Clampi is a Trojan horse that attempts to steal login credentials related to online banking and other financially related websites. The threat is typically installed by way of drive-by download and once it compromises a computer, it downloads several modules. One of these modules is used to spread Clampi through network shares.Trojan.Clampi is able to bypass firewalls to relay the stolen information to a remote attacker and also uses a SOCKS proxy to allow the remote attacker to then login to banking and other financially related websites anonymously with the stolen credentials.
More information on Trojan.Clampi is available in the threat family writeup.
