You are not authorized to post comments.

Antiphishing fighters take on malware

By Robert Mullins, IDG News Service |  Security Add a new comment

The volunteers behind the Phishing Incident Reporting and Termination Squad (PIRT) have started a new project to crack down on malware.

Called the Malware Incident Reporting and Termination Squad (MIRT), the effort was launched earlier this week, according to Paul Laudanski, owner of Computer Cops LLC and the leader of the project.

MIRT works in much the same way as PIRT, an antiphishing project launched in March of this year. It invites users to submit samples of potentially malicious code to a database of "unknown files," which are then analyzed and reverse-engineered by MIRT's team of volunteers. MIRT then will publish reports on the malicious software and make its findings known to authorities and security companies, Laudanski said.

This same approach has worked pretty well for PIRT. To date, PIRT has received 80,000 submissions from volunteers, and it has handed the U.S. Federal Bureau of Investigation details on about 300 e-mail "drop accounts" where information was being delivered after successful phishing attacks.

Laudanski believes that MIRT's volunteer approach will allow the project to pick up information that the big antivirus companies may be missing. "There are a lot of places that we can tap into that give us a grassroots look at the malware that the antivirus vendors don't get," he said.

There is no shortage of malicious software to be scrutinized. Symantec Corp. said recently that it counted 6,784 new worms and viruses in the first six months of 2006.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question