Malware producers have become ever more organised, with evolved distribution channels and greater resources, yet many organisations and individuals are still not aware of this, according to CA.
Speaking at the Data#3 Juice IT convention, CA director of channel sales, Asia-Pacific and Japan, Dean Saunders, claimed 'crimeware-as-a-service' has evolved from an attempt by individuals to achieve notoriety to a broader, money-making venture with malware vendors prepared to invest resources and time to conceal their activities.
He pointed to Stuxnet as an example of this in action. An amazingly complex piece of malware, Stuxnet is predicted to have required the equivalent of 10 programmers working full time over six months to have produced.
But crimeware vendors have also evolved in terms of delivery, with more robust distribution channels, and making use of social engineering marketing to improve 'sales.'
"You've heard of zbot, no doubt," Saunders told the audience. "But most people haven't heard so much about what's involved in the distribution and installation of modern day crimeware, such as cutwail or bredolab.
"Only in the last 12 months have the majority of our customs even moved away from straight anti-virus solutions."
In an environment where only two per cent of reported malware infections are malware, this suggests that the IT industry still has a lot of education to do with customers.