China claimed first place in the top three countries hosting sites which spread malware, with 26%, followed by the US, with 18%, and Russia, with 12%.
This is according to Kaspersky Lab's Malware Miscellany report for September. The report also shows the top three countries for malicious URLs are Canada, with 21%; the US, with 16%; and lastly China, with 15%.
The report reveals the Chinese porn site www.langlangdor.com infected the greatest number of Internet users, with 1.62% of all online infections globally. According to the company, this is not surprising, as porn attracts a lot of visitors.
In terms of the site spreading the largest number of unique malware, www.gddsz.store.gg.com was the major culprit, with 1 142 unique malicious programs being spread from it alone.
“The programs vary widely, covering nearly all the different types of malware behaviour classified by Kaspersky Lab,” the company said.
Vulnerabilities and exploits
According to the report, it came to light in late July that Adobe Flash Players 9 and 10 were found to have multiple vulnerabilities, which cyber crooks could exploit to access a system, run arbitrary code, gain access to private data, or bypass security systems. “This was found to be the most widespread vulnerability on users' computers,” states Kaspersky.
In terms of common exploits, Malware Miscellany found Exploit.JS.DirektShow: in combination with Exploit.Win32.DirektShow was the most common exploit found. “This malware family exploits a critical vulnerability in IE 6.0 and IE 7.0 and has recently become very widespread on the Internet,” says the company.
In just a month, Packed.Win32.TDSS.z tried to gain access to computers in 108 countries globally, earning itself the title of most widespread malware on the Internet, the report shows.
In terms of the worst joke or hoax program that annoys or scares users, but does not contain a malicious payload, Hoax.JS.Agent.c was the winner. “This hoax displays an obscene video clip, bombarding victims with highly offensive messages that cannot be stopped,” concludes Kaspersky.

