Distribution potential

This phrase refers to the possible rate by which malware can spread to another system as defined by its speed or the complexity of its infection technique. We classify distribution potential as follows: High Blended threats (i.e. spreads via email, P2P, IM, network shares) Mass mailers Spreads via network shares A combination of two or more spreading techniques, regardless of classification Medium Mailers has spread via third-party or media spreads in IRC, IM, or P2P requires user intervention to spread URL/Web site download Low no network spreading requires manual distribution to spread Highlights/notable incidents The DOWNAD malware found in 2008 exhibited high distribution potential. It has multiple spreading techniques and is noted for generating hundreds of URLs it connects to.