The Commtouch Quarterly Trends Threat Report provides insight on the latest spam, malware, phishing schemes and other web security threats. The April 2011 edition provides analysis of Internet security threats that occurred during the first quarter of 2011.

1. Internet Threats Trend Report April 2011

2. April 2011 Threat Report The following is a condensed version of the April 2011 Commtouch Internet Threats Trend Report Download the complete report atwww.commtouch.com/threat-report Copyright© 2011 Commtouch Software Ltd. Recurrent Pattern Detection, RPD, Zero-Hour and GlobalView are trademarks, and Commtouch, Authentium, Command Antivirus and Command Anti-malware are registered trademarks, of Commtouch. U.S. Patent No. 6,330,590 is owned by Commtouch.

3. April 2011 Threat Report 1 Key Highlights 2 Feature The ups & downs of Spam in Q1 3 Malware, Compromised Websites,Spam and Web 2.0 Trends

4. Key Highlights

5. Key Security Highlights Average daily spam/phishing emails sent 149 billion Average daily spam was up in Q1

6. Key Security Highlights Zombie daily turnover 258,000 Zombies Number of zombies turned off and on each day went down in Q1

7. Key Security Highlights Most popular blog topic onuser generated content sites Streaming media/downloads

8. Key Security Highlights Most popular spam topic Pharmacy ads (28% of spam) While it was the most popular spam topic,it was down to only 28% of all spam

9. Key Security Highlights Country with the most Zombies India (17%) India remains atop the list but with just 17%

10. Key Security Highlights Website category most likely to be compromised with malware Parked Domains Parked Domains took over the top spotin categories likely to be compromised

11. Feature… The ups & downs of spam in Q1

13. Around Jan 10, 2011, spam shot up 45% (compared to previous two weeks) to pre-Christmas levels

14. The increase was attributed to the resumption of activity by the Rustockbotnet – primarily sending out pharmaceutical spam

15. Spam stabilizes in middle of quarter

17. Result – dramatic 30% decrease in spam rates, Spam Levels, December 2010 - March 2011 Source: Commtouch

19. Large malware outbreak at the end of March results in large-scale recruitment of new zombies – more than doubling the daily turnoverNewly Activated Zombies, January - March 2011 Source: Commtouch

20. Other trends in Q1 2011… Malware

22. Web-based methods have become more common as illustrated by several of the attacks described in this report

23. March Outbreak changed this – very high levels of emails with attached malware

24. At its peak accounted for over 30% of all email received

28. One possible theory is the rebuilding of a botnet or new botnet after the takedown of Rustock

30. Attached file contains JavaScript targeting vulnerabilities in PDF readers not running latest patches

31. After PC exploited, the malware fetches other malware from the InternetSource: Commtouch

32. Malware Trends Other Malware in Q1 targeted Figure below shows the flow of attack

35. Other trends in Q1 2011… Compromised Websites

39. Benefits for the spammer

40. Provides FREE hosting

43. Cuts costs

46. Dropped to 28% of all spam

47. Down from 42% in Q4 2010

48. 419 fraud, enhancements, and dating all increased Source: Commtouch

49. Spam Trends Spam Sending Domains Commtouch monitors domains used by spammers in the “from” field of the spam emails, typically faked in order to give the impression of a reputable, genuine source.

51. 17th place – dhl.comUsed in the later stages of the March outbreak

52. 40th place – postmaster.twitter.comUsed extensively throughout Q1 to distribute fake Twitter notifications with links to pharmacy sitesSource: Commtouch

54. Brazil returned to second place with 12% after drop in last quarter

55. Russia dropped 3% to 7%

56. Vietnam moved into 3rd place

58. Web 2.0 Trends Web 2.0 Trends Commtouch’s GlobalView Network tracks billions of Web browsing sessions and URL requests, and its URL Filtering service includes highly granular categorization of Web 2.0 content. In addition to filtering accuracy, this provides insight into the most popular user generated content sites.

59. Web 2.0 Trends Most Popular User Generated Content Sites Includes sites with live or archived media for download or streaming content, such as Internet radio, Internet TV or MP3 files These blogs typically cover television, movies, and music as well as hosting celebrity fan sites and entertainment news Source: Commtouch

60. Review of Q1 2011

61. Review of Q1 2011 Source: Commtouch

62. Download the complete April 2011 Internet Threats Trend Reportatwww.commtouch.com/threat-report

63. For more information contact: info@commtouch.com 650 864 2000 (Americas) +972 9 863 6888 (International) Web: www.commtouch.com Blog: http://blog.commtouch.com