The list of top 10 e-threats for August published by BitDefender AV
researchers is dominated by web-based threats. The list features no less than
three variants of the Wimad Trojan downloader (a fake codec downloader usually
found on malicious websites) in places 2-4, and is headed by a very common
ad-serving trojan called Clicker.CM.
In fifth place, Trojan,Qhost.AKR is a piece of malware aimed directly at
BitDefender users which tries to disable the antivirus' update feature, thus
rendering the host defenseless. A generic detection for a Flash exploit (used by
multiple pieces of malware) can be found in sixth position, while
Trojan.Swizzor.1, another very old and very common web-based threat, comes in at
seventh position.
In eighth, a curious appearance is an ActiveX exploit used to trick a browser
into downloading and installing malware. The exploit targets an ActiveX control
called Sina DLoader. The control can be found on (legitimate) Chinese websites.
The systems of users who have accepted to run it are, obviously, at risk, but
this is a rare occurrence outside of China.
A trojan that spreads via P2P file sharing can be found in ninth place, while
the last spot was grabbed (only just) by a past menace, a downloader for fake
anti-virus package XP Antivirus.