The Virus Top Twenty

Kaspersky Labs presents the Virus Top 20 for the month of April, 2003.

The percentage shown represents the percentage of registered incidences.

1
I-Worm.Klez
20.11%

2
I-Worm.Lentin
17.91%

3
I-Worm.Ganda
0.76%

4
Trojan.PSW.M2
0.69%

5
Win95.CIH
0.67%

6
Macro.Word97.Thus
0.56%

7
<!–!–>Trojan.PSW.MiniLD
0.56%

8
<!–!–>PS-MPS-based
0.52%

9
<!–!–>Backdoor.IRC.Zcrew
0.47%

10
Macro.Word97.VMPC-based
0.47%

11
<!–!–>Mnemonix.Oracle
0.47%

12
I-Worm.LovGate
0.44%

13
<!–!–>BW-based
0.43%

14
Win95.Spaces
0.41%

15
Win32.HLLP.Hantaner
0.40%

16
I-Worm.Tanatos
0.39%

17
BackDoor.SubSeven
0.38%

18
<!–!–>Backdoor.SdBot.gen
0.37%

19
I-Worm.Sobig
0.32%

20
<!–!–> VBS.Redlof
0.31%

Other Malicious Programs*
25.33%
*not included in the Top 20

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.