Anti-Malware Lab Report Says Four out of Five Malware Samples are Trojans

Six million new malware samples were created in the first quarter of 2012 alone, according to an anti-malware laboratory's quarterly report.

PandaLabs, Panda Security's anti-malware laboratory, today published its quarterly report analyzing IT security events and incidents from January through March 2012. The full report is available at http://press.pandasecurity.com/press-room/reports/.

Malware Statistics

According to the report, trojans now represent 80 percent of all new malware, up from 73 percent in 2011. Worms comprise 9.30 percent of malware, followed by viruses at 6.43 percent. In the 2011 report, however, there were more viruses (14.25 percent) than worms (8 percent). 

When it comes to the number of infections caused by each malware category, the ranking supports the view that trojans, worms and viruses are the three most popular types of malware. Interestingly, worms caused only 8 percent of all infections despite accounting for more than 9 percent of all new malware. In the past, however, worms typically caused many more infections due to their ability to multiply.

The report findings support the view that massive worm epidemics have become a thing of the past and have been replaced by an increasing avalanche of silent trojans, cyber-criminals' weapon of choice for their attacks.

China Tops List of Infections per Country

The average number of infected PCs across the globe stands at 35.51 percent, down more than 3 percent from 2011, according to Panda Security's collective intelligence data.

China again this year led had the highest number of infections in the world (54.24 percent of infected PCs), followed by Taiwan and Turkey. In comparison, European countries tend to have the least amount of infected computers. Nine out of ten of countries with least amount of infected computers are European. The top three least infected are Sweden, Switzerland, and Norway. Japan is the only non-European country among the top ten nations with fewer than 30 percent of computers infected. 

What’s in the Report

In the report, PandaLabs highlights several top security incidents that occurred during Q1. There was a marked increase in 'ransomware' attacks over the past quarter due in large part to the so-called 'Police Virus.' The virus displays messages with logos of international law enforcement agencies to trick users into believing that their computers have been locked by the police for visiting inappropriate websites or making illegal downloads. To unlock it, users have to pay a fine, usually in the range of one hundred euros, dollars or British pounds (depending on the target of the attack). These messages are coming from the Trojans themselves. 

The report also covers the latest attacks on Android cell phones, distribution of malware via Facebook, the Megaupload case, cyber-war and the latest activities of the Anonymous and LulzSec hacktivist groups. "Although it's still early in the year, so far what we have seen in 2012 is a continuation of past trends,” said Luis Corrons, technical director of PandaLabs. “Cyber-criminals are still trying to steal users' information and money by any means possible."

Featured

  • Security Today Announces 2025 CyberSecured Award Winners

    Security Today is pleased to announce the 2025 CyberSecured Awards winners. Sixteen companies are being recognized this year for their network products and other cybersecurity initiatives that secure our world today. Read Now

  • Empowering and Securing a Mobile Workforce

    What happens when technology lets you work anywhere – but exposes you to security threats everywhere? This is the reality of modern work. No longer tethered to desks, work happens everywhere – in the office, from home, on the road, and in countless locations in between. Read Now

  • TSA Introduces New $45 Fee Option for Travelers Without REAL ID Starting February 1

    The Transportation Security Administration (TSA) announced today that it will refer all passengers who do not present an acceptable form of ID and still want to fly an option to pay a $45 fee to use a modernized alternative identity verification system, TSA Confirm.ID, to establish identity at security checkpoints beginning on February 1, 2026. Read Now

  • The Evolution of IP Camera Intelligence

    As the 30th anniversary of the IP camera approaches in 2026, it is worth reflecting on how far we have come. The first network camera, launched in 1996, delivered one frame every 17 seconds—not impressive by today’s standards, but groundbreaking at the time. It did something that no analog system could: transmit video over a standard IP network. Read Now

  • From Surveillance to Intelligence

    Years ago, it would have been significantly more expensive to run an analytic like that — requiring a custom-built solution with burdensome infrastructure demands — but modern edge devices have made it accessible to everyone. It also saves time, which is a critical factor if a missing child is involved. Video compression technology has played a critical role as well. Over the years, significant advancements have been made in video coding standards — including H.263, MPEG formats, and H.264—alongside compression optimization technologies developed by IP video manufacturers to improve efficiency without sacrificing quality. The open-source AV1 codec developed by the Alliance for Open Media—a consortium including Google, Netflix, Microsoft, Amazon and others — is already the preferred decoder for cloud-based applications, and is quickly becoming the standard for video compression of all types. Read Now

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”