W32/HLLP.Philis variants spike in China

Within the last month we’ve seen a spike of new W32/HLLP.Philis variants being posted primarily on Chinese sites. This goes to further underscore the point in our last blog about the importance placed in the malware authoring community of frequent new variants and the recurrence of parasitic infectors.

What makes this particularly notable is that most of these virus-laden postings were from links included in blog and forum posts.

Comment spam is nothing new, malware-related comment spam has specifically been reported for a number of months. This serves as a reminder that malware authors are constantly keeping up with trends in technology. Regardless of whether something is reasonably new, if it’s something that’s popular it’ll be a good “return on investment” for their malicious purposes.