





Outbreak Alert
Most Active New Threats
| Name | Type | Discovered |
| Packed.Generic.367 | Trojan Worm | 16/05/2012 |
| Packed.Dromedan!gen3 | Trojan Virus | 15/05/2012 |
| Trojan.Smoaler!gen3 | Trojan | 14/05/2012 |
| Packed.Generic.366 | Trojan Worm | 11/05/2012 |
| Trojan.Tatanarg.B | Trojan | 10/05/2012 |
| Packed.Generic.364 | Trojan Worm | 09/05/2012 |
| Suspicious.Epi.2 | Trojan Virus | 08/05/2012 |
| Bloodhound.Olexe.2 | Trojan Virus | 08/05/2012 |
| Bloodhound.Flash.15 | Trojan Virus | 08/05/2012 |
| Trojan.Maljava!gen19 | Trojan | 07/05/2012 |
Internet Threat Meter
The Internet Threat Meter provides a quick visual indicator of how likely each common online activities is likely to encounter some form of threat from a malicious attacker.
- Hover over each activity for a short explanation of the current risk level
- Click on an activity to visit a page with more detail on that activity and the risk level

Email
LOW RISK:
Use Basic Caution
Malicious code and fraudulent messages often circulate via email. Never open unsolicited attachments or hyperlinks, and always verify the source of any messages that ask you for sensitive information.
Web Activities
MEDIUM RISK:
Use Extra Caution
Microsoft Updates for May 2012 have been released. Please ensure that latest updates are applied.
Instant Messaging
LOW RISK:
Use Basic Caution
Currently there are no widespread outbreaks of malicious code circulating via instant messaging. In the past, however, some malicious code did take advantage of IM. Always use normal security precautions whenever you use IM.
File Sharing
LOW RISK:
Use Basic Caution
Although attackers often use this medium to distribute trojan applications and malicious code, no high-profile threats are currently affecting the medium. Always use caution when downloading files, especially from sources you don’t know or trust.
Security Response Blog
OSX.Flashback – How to Turn Your Botnet into $$$
Symantec Security Response @ Wed, 16 May 2012 18:58:38Further analysis of the OSX.Flashback botnet has shed more light on how profitable such a botnet ...
Thieves in the Temple: Android.Opfake Makes Another Run
Irfan Asrar @ Wed, 16 May 2012 18:35:36The Opfake gang can be called many things but “lazy” isn't one of them. In the ...
Rise of .in URLs in Spam
Eric Park @ Mon, 14 May 2012 20:19:03.node-content-pad td {padding:2px 4px !important;}Symantec has observed an increase in spam messages containing URLs using ...
Save the Date: ISTR 17 Twitter Chat
Symantec Security Response @ Wed, 9 May 2012 20:26:30Join Symantec security experts on Twitter (using the #ISTR hashtag) on Tuesday, May 15, at 10 ...
Microsoft Patch Tuesday - May 2012
Candid Wueest @ Tue, 8 May 2012 19:14:56Hello, welcome to this month’s blog on the Microsoft patch release. This is a larger month—the ...
Lizamoon Mass SQL-Injection: Tried and Tested Formula
Stephen Doherty @ Tue, 8 May 2012 00:30:20Analysis: Kevin Savage read more ...
Twitter Feed





Threat Spotlight
Trojan.Clampi is a Trojan horse that attempts to steal login credentials related to online banking and other financially related websites. The threat is typically installed by way of drive-by download and once it compromises a computer, it downloads several modules. One of these modules is used to spread Clampi through network shares.Trojan.Clampi is able to bypass firewalls to relay the stolen information to a remote attacker and also uses a SOCKS proxy to allow the remote attacker to then login to banking and other financially related websites anonymously with the stolen credentials.
More information on Trojan.Clampi is available in the threat family writeup.
