Malware Infections 5.5 Times More Likely Without Antivirus Software, Finds New Research from Microsoft

Microsoft’s Security Intelligence Report shows 27% of computers in Malaysia lack up-to-date malware protection, dramatically increasing risk of infection 

KUALA LUMPUR, 26 April 2013 — In conjunction with the recently released Volume 14 of its Security Intelligence Report (SIRv14), Microsoft Malaysia hosted Tim Rains, the Director of Microsoft Trustworthy Computing Group as part of his exclusive APAC Tour, which covered five countries. The SIRv14 revealed an important trend related to antivirus (AV) software. The study showed 27% of computers in Malaysia do not use up-to-date Antivirus. According to the report, without this vital protection layer, computers are 5.5 times more likely to be infected with malware. Antivirus helps to guard against viruses, remove infections and protect people’s privacy.

“People intuitively understand the importance of locking their front door to prevent their homes from being broken into. Computer security is no different. Surfing the Internet without up-to-date Antivirus is like leaving your front door open to criminals,” said Tim Rains, Director, Trustworthy Computing, Microsoft. “With the release of this new research, Microsoft is urging people to make sure they have up-to-date Antivirus installed on their computers.”

In Malaysia, SIRv14 showed that the following threats were most prevalent:

• The most common category in Malaysia was Miscellaneous Potentially Unwanted Software. It affected 39.6 percent of all computers with detections there, up from 32.4 percent.
• The second most common category in Malaysia was Worms. It affected 38.6 percent of all computers with detections there, up from 37.3 percent.
• The third most common category in Malaysia was Miscellaneous Trojans, which affected 24.5 percent of all computers with detections there, down from 24.6 percent.

“The percentage of two out of three most common threat categories in Malaysia has increased since the last report, which shows how the local threat landscape is evolving and how different locations around the world exhibit different threat patterns. This has potentially negative implications for Malaysians in terms of their privacy and personal safety, financial integrity as well as day-to-day business operations, especially since Windows XP still makes up 20.39% of PCs in Malaysia,“ added Rains.

“While XP was one of the most popular operating systems in Microsoft’s history, it was not designed to handle the challenges of today, such as the increased exposure to cyber-attacks and demands for more data privacy. Windows XP 32 bit systems are almost four times more likely to be infected with malware when not protected. Additionally, Windows XP SP3 has the smallest difference between the infection rates of protected and unprotected computers, with protected computers reporting an infection rate 3.7 times greater than unprotected computers, which means that even protected computers running Windows XP face risks from exploitation and malware infection that don’t apply to more recent versions of Windows,” said Rains

Speaking at a recent roundtable event on the impact of malware through counterfeit software, CyberSecurity Malaysia, the national cyber security specialist agency under the purview of the Ministry of Science, Technology and Innovation (MOSTI), reiterated Microsoft’s concern on malware and the proactive steps required to be safe online.

Tim Rains, Director of Microsoft Trustworthy Computing Group.

“Internet users in Malaysia remain exposed to cybercrimes and other online threats due to the low awareness surrounding the issue. As the findings of the study made by Microsoft revealed the danger of counterfeit software, we need to intensify the awareness level on safety issues in cyberspace amongst the consumers,” said Dr. Amirudin Abdul Wahab, Chief Executive Officer, CyberSecurity Malaysia. “In Quarter 1 of 2013, our Cyber999 Security Incident Help Centre received 2,499 cyber security incidents reports from the public including incidents related to malware. The numbers will grow if consumers are not aware of the various cyber safety issues,” added Dr. Amir.

Safety and Security begin at home

Additionally, the report uncovered that despite the benefits of Antivirus, many people did not realize they were unprotected, citing a number of reasons:-
• A trial period has expired or the software is out-of-date
• The antivirus software was disabled by offenders
• Did not install Antivirus due to ignorance on the importance of protection

“Regardless of whether you use a free or paid for solution, the importance of Antivirus cannot be overstated,” continued Rains. “By taking the proper measures to protect your computer, including the most basic step of installing Antivirus, people can dramatically reduce their risk of becoming a victim.”

Tim however, was also quick to suggest that applying up-to-date antivirus software was only part of a bigger picture. He reiterated that ensuring a safe and secure online environment goes beyond AV, and into smart and proactive online habits.

“Today’s internet users take things for granted and this lackluster attitude is reflected in the way they conduct themselves online. Internet users need to be more proactive and vigilant, and this includes practicing safe browsing habits, such as using a web browser with built-in safety features and paying attention to alerts and warnings encountered while browsing. However, it can sometimes be difficult for even experienced Internet users to avoid coming into contact with malware, which is why besides AV and sound online practices, Internet users need to ensure that they are running the latest iteration of Windows. PCs running Windows 8 has the highest rate of protection, with just 8.1 percent running the 32-bit edition and 7.0 percent of computers running the 64-bit edition lacking up-to-date real-time protection. Windows 8 also includes real-time antimalware and antispyware protection by default, which is a mark improvement from previous iterations of Windows that were not designed to handle the challenges of today,” said Rains.

In line with Microsoft’s initiatives, Dr. Amir also advised Internet users to report their cyber security incidents to Cyber999 Help Centre by email - cyber999@cybersecurity.my. “Our advice to all Internet users is to be constantly vigilant of the latest computer security threats and to always take preventive measures to protect their computers from cyber threats. CyberSecurity Malaysia has developed a CyberSAFE program, whereby people can learn and obtain various tips on cyber safety and Internet security at www.cybersafe.my.”

Microsoft is continually committed to help protect consumers and to ensure a more trustworthy online experience by providing them with the necessary tools and guidance to stay safer online, including the SIRv14, which explains some of the most prevalent threats facing consumers online.

• Think before you click:  Microsoft detected and removed malicious email attachments from almost three million computers in the fourth quarter of 2012. People encounter this type of threat when opening documents, such as a PDF or Word document, that have been maliciously crafted and sent to them in an email.  Antivirus can help to prevent infection from this type of attack.
• Bargain hunters beware: Keygen, a threat family commonly bundled with malware, was detected almost 7 million times in the fourth quarter of 2012.  People seeking free or discounted software, movies or games online increase the risk of encountering this type of threat Antivirus can help to protect against this.

Microsoft releases the SIR twice a year to inform the public about the most prevalent global threats so they can protect themselves and their organizations. SIRv14 includes data from the second half of 2012 and contains threat intelligence from over a billion computers worldwide. It also provides in-depth perspectives on software vulnerabilities, software vulnerability exploits, malicious and potentially unwanted software, and security breaches in both Microsoft and third party software.