SYMANTEC ENTERPRISE SECURITY
Symantec Internet Security
Threat Report
Trends for January–June 07
Volume XII, Published September 2007
Dean Turner
Executive Editor
Symantec Security Response
Stephen Entwisle
Senior Editor
Symantec Security Response
Eric Johnson
Editor
Symantec Security Response
Marc Fossi
Analyst
Symantec Security Response
Joseph Blackbird
Analyst
Symantec Security Response
David McKinney
Analyst
Symantec Security Response
Ronald Bowes
Analyst
Symantec Security Response
Nicholas Sullivan
Analyst
Symantec Security Response
Candid Wueest
Analyst
Symantec Security Response
Ollie Whitehouse
Security Architect—Advanced Threat Research
Symantec Security Response
Zulfikar Ramzan
Analyst—Advanced Threat Research
Symantec Security Response
Jim Hoagland
Principal Software Engineer
Symantec Security Response
Chris Wee
Manager, Development
Symantec Security Response
Contributors
David Cowings
Sr. Manager of Operations
Symantec Business Intelligence
Dylan Morss
Manager
Symantec Business Intelligence
Shravan Shashikant
Principal Business Intelligence Analyst
Symantec Business Intelligence
Symantec Internet Security Threat Report Executive Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Future Watch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Attack Trends. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Vulnerability Trends . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Malicious Code Trends . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Phishing Trends. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .