SUNNYVALE, CA--(MARKET WIRE)--Sep 3, 2008 -- Fortinet® -- the pioneer and leading provider of unified threat management (UTM) solutions -- today announced the top 10 most reported high-risk threats for August 2008. Malware W32/Multidr.JD!tr and HTML/Agent.HFZ!phish, disguised as security software AntiVirus XP 2008 and XP Security Center, claimed the top two positions in Fortinet's Top 10 with nearly 20 percent of the month's activities. W32/Multidr.JD was especially prolific with a one-day attack in late August that dislodged pesky mass mailer Netsky from its persistent No. 1 position. HTML/Agent.HFZ!phish arrived in users' in-boxes as a purported UPS email with rogue XP Security Center attached, claiming to be an important document.

"Cyber criminals are clearly trying to take advantage of users' security concerns with an intense campaign for rogue security applications this past month," said Derek Manky, security researcher for Fortinet. "This is a popular, emerging area that provides a new social engineering approach -- black hats posing as white hats."

Fortinet's FortiGuard® Global Security Research Team compiled this report based on intelligence gathered from FortiGate® multi-threat security systems in production worldwide. Customers who use Fortinet's FortiGuard Subscription Services are already protected against the threats outlined in this report.

Other malware trends observed during this period include the following:

 
--  Virut.A, a virus that infects executable files, refuses to back down,
    remaining in the top five position for seven consecutive months;

--  Mytob and Pushdo mass mailers slid out of the top 10, but remain
    relevant;

--  Iframe traffic redirectors remain strong, moving up one position to
    sixth place from the July edition of this report.

Following are the Top Ten individual threats and Top Five threat families in August. Top 100 shifts indicate positional changes compared to July's Top 100 ranking, with "new" representing the malware's debut in the Top 100.

Top Ten Individual Threats

 
                                                   % of        Top 100
Rank    Threat Name                Threat Type  Detections      Shift
        -----------------------    -----------  -----------  -----------
1       W32/Multidr.JD!tr            Trojan       10.02         new
        -----------------------    -----------  -----------  -----------
2       HTML/Agent.HFZ!phish         Trojan        8.15         new
        -----------------------    -----------  -----------  -----------
3       W32/Netsky!similar         Mass mailer     5.95         -2
        -----------------------    -----------  -----------  -----------
4       JS/Agent.WMA!tr.dldr         Trojan        5.9          new
        -----------------------    -----------  -----------  -----------
5       W32/Virut.A                   Virus        4.65         -3
        -----------------------    -----------  -----------  -----------
6       JS/Iframe.DR                 Trojan        4.19         +1
        -----------------------    -----------  -----------  -----------
7       W32/Agent.KG!tr              Trojan        3.36         new
        -----------------------    -----------  -----------  -----------
8       HTML/Iframe.DN!tr.dldr       Trojan        2.59         -3
        -----------------------    -----------  -----------  -----------
9       HTML/Iframe_CID!exploit      Exploit       2.12         +17
        -----------------------    -----------  -----------  -----------
10      JW32/Agent.HKR!tr            Trojan        1.98         new
        -----------------------    -----------  -----------  -----------

Top Five Families

 
Rank    Malware Family    Percentage   Top 10 Shift
        --------------   ------------  ------------
1       Netsky               9.5            +1
        --------------   ------------  ------------
2       OnlineGames          7.7            -1
        --------------   ------------  ------------
3       MyTob                5.8            -
        --------------   ------------  ------------
4       Virut                5.4            -
        --------------   ------------  ------------
5       Pushdo               3.0            +6
        --------------   ------------  ------------

To read the full August report, please visit: http://www.fortiguardcenter.com/reports/roundup_aug_2008.html. For ongoing threat research, bookmark the FortiGuard Center (http://www.fortiguardcenter.com/) or add it to your RSS feed by going to http://www.fortinet.com/FortiGuardCenter/rss/index.html. To learn more about FortiGuard Subscription Services, visit http://www.fortinet.com/products/fortiguard.html.

FortiGuard Subscription Services offer broad security solutions including antivirus, intrusion prevention, Web content filtering and anti-spam capabilities. These services help enable protection against threats on both application and network layers. FortiGuard Services are updated by the FortiGuard Global Security Research Team, which enables Fortinet to deliver a combination of multi-layered security intelligence and zero-day protection from new and emerging threats. These updates are delivered to all FortiGate, FortiMail and FortiClient products.

About Fortinet (www.fortinet.com)

Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection -- including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: Firewall, Antivirus, IPSec VPN, SSL VPN, Network IPS, and Anti-spam. Fortinet is privately held and based in Sunnyvale, California.

Copyright © 2008 Fortinet, Inc. All rights reserved. The symbols ® and (TM) denote respectively federally registered trademarks and unregistered trademarks of Fortinet, Inc., its subsidiaries and affiliates, including, but not limited to, the following trademarks: Fortinet, FortiGate, FortiGuard, FortiManager, FortiMail, FortiClient, FortiCare, FortiAnalyzer, FortiReporter, FortiOS, FortiASIC, FortiWiFi, FortiSwitch, FortiVoIP, FortiBIOS, FortiLog, FortiResponse, FortiDB, APSecure, and ABACAS. Other trademarks belong to their respective owners.

     Media Contact:
     Kim Nguyen
     Fortinet, Inc.
     +1 408 486 5458
     knguyen@fortinet.com