Flash, malware and ransomware top list of online threats

Adobe Flash

Your humble browser has again been identified as the main vector for distributing malware across target machines.

A McAfee Labs threat report has highlighted two distinct threats, the first being Adobe's Flash software platform which remains a constant thorn in the side of users who are hit by the double whammy of performance penalties and security issues.

Attacks based on it have increased threefold in the first quarter of the year as criminals move away from Oracle's Java and Microsoft's now-obsolete Silverlight.

More than 40 new Adobe Flash vulnerabilities were submitted to the National Vulnerability Database in the first quarter of the year with fixes issued by Adobe within 24 hours.

New threats coming

The current Adobe Flash beta, version 18, promises to bring a number of bug fixes and enhancements related to security, stability, performance and device compatibility.

McAfee Labs also identified the CTB Locker ransomware as another rising threat (up by 165 per cent in the first quarter of 2015), coercing victims to pay a ransom in order to get keys for their encrypted files.

Malware that can interfere with the firmware of storage devices was another potential threats identified Intel's security business unit.

It found that the malware could be used to "reprogram the firmware in SSDs in addition to the previously-reported HDD reprogramming capability", and remained persistent (and undetectable) even if the drives were reformatted and the OS reinstalled.

TOPICS
Desire Athow
Managing Editor, TechRadar Pro

Désiré has been musing and writing about technology during a career spanning four decades. He dabbled in website builders and web hosting when DHTML and frames were in vogue and started narrating about the impact of technology on society just before the start of the Y2K hysteria at the turn of the last millennium.

Latest in Security
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
Nation-state threats are targeting UK AI research
Scam alert
Fake jobs and phone calls: How Americans lost $12.5 bn to fraud in 2024
Application Security Testing Concept with Digital Magnifying Glass Scanning Applications to Detect Vulnerabilities - AST - Process of Making Apps Resistant to Security Threats - 3D Illustration
Google bug bounty payments hit nearly $12 million in 2024
Scam alert
A new SMS energy scam is using Elon Musk’s face to steal your money
Representational image of a cybercriminal
Allstate sued for exposing personal customer information in plaintext
Latest in News
Project Moohan prototype at Samsung Galaxy Unpacked, an XR goggles headset on display in a show area
Samsung's Android XR headset could avoid the Apple Vision Pro's biggest mistake, according to this leak
Rivian R1T
Big Rivian update delivers hands-off driving to rival Tesla Autopilot – and a new 'Rally' mode
The Samsung Galaxy S25 Edge, close up on the dual camera system, against a marbled background
The Samsung Galaxy S25 Edge is being tipped to come with a sweet Google Gemini deal
Matt Murdock and Kirsten McDuffie standing in a court room in Daredevil: Born Again
Daredevil: Born Again episode 3 contains another Marvel reference to Spider-Man, but it's got nothing to do with Tom Holland's Peter Parker
Man having Windows 11 problems with his laptop
Fed up of adverts creeping into Windows 11? You won’t like Microsoft’s latest update, then, although it does provide some important bug fixes
Apple Siri
Update your Apple device now: iOS 18.3.2 fixes a flaw that could be exploited by hackers