Kaspersky is taking the data they receive from endpoints running their protection and mapping it out in real-time to provide a visualization of attack activity by country. The detection vectors are color coordinated between on-access scans, on-demand scans, web antivirus, mail antivirus, intrusion detection scan, and vulnerability scan. Along with the real-time data, you can click statistics in the lower-right to see more numbers from the day.
I can’t help but look for some bias in the data. There can easily be changes in behavior at different times of the day – more computers are turned off in a country late at night. Is Kaspersky more popular in certain countries which makes the country appear to be a higher target of malware attacks?
The map, by default, is a 3D globe with a dark color scheme. Using the buttons on the right, you can switch to a light color scheme or a 2D map.
You can check out the map yourself at http://cybermap.kaspersky.com
For more information about the Cyberthreat map, read Kaspersky’s blog post.