Friday, May 30, 2008

Storm Worm Hosting Pharmaceutical Scams

›
With Storm's recent SQL injection and introduction of several new domains within, the very latest additions to their domain portfolio a...

Comcast.net not Hacked, DNS Records Hijacked

›
Two days ago in a show off move, the Kryogenics team managed to change the DNS records of Comcast.net , and consequently, redirect traffic ...
Tuesday, May 27, 2008

Malware Attack Exploiting Flash Zero Day Vulnerability

›
It's been a while since we've last witnessed malware attacks using zero day vulnerabilities, and the latest one exploiting a zero d...

Asprox Phishing Campaigns Dominated in April

›
According to the latest report from the Phishtank , a great resource for OSINT data, five IPs were hosting 6547 phishing campaigns in April,...
Monday, May 26, 2008

Yet Another Massive SQL Injection Spotted in the Wild

›
Another SQL injection attack was spotted in the wild during the last couple of hours, and while it continues remaining active, surprisingly...

Web 2.0 Privacy and Security Workshop - Papers Released

›
Last week, the 2008's W2Sp workshop held in Oakland, California and sponsored by the IEEE Symposium on Security and Privacy , made ava...

A Review of Hakin9 IT Security Magazine

›
A new issue of the Hakin9 - Hard Core IT Security Magazine is "in the wild", and since the editorial staff has been kind enough t...

How Does a Botnet with 100k Infected PCs Look Like?

›
Digitally ugly for sure, the point is that this malware campaign has been spreading pretty rapidly over MSN and AIM as of recently, and with...
Friday, May 23, 2008

The Icepack Exploitation Kit Localized to French

›
Bonjour! In a surprising move by the French blackhats, the Icepack web malware exploitation kit has been localized to French, further expand...
Thursday, May 22, 2008

Malware Domains Used in the SQL Injection Attacks

›
Whereas the value of these malicious domains lies in the historical preservation of evidence, as long as hundreds of thousands of sites cont...
Wednesday, May 21, 2008

Yet Another DIY Proprietary Malware Builder

›
Following the most recent proprietary web malware exploitation kits, and DIY malware tools found in the wild , this is among the latest m...

The Whitehouse.org Serving Malware

›
The Whitehouse.org a parody site of the original Whitehouse.gov is serving malware. From TrendMicro's blog : " According to Trend...
Tuesday, May 20, 2008

Pro-Serbian Hacktivists Attacking Albanian Web Sites

›
The rise of pro-kosovo web site defacement groups was marked in April, 2008, with a massive web site defacement spreading pro-kosovo propag...

Fake PestPatrol Security Software

›
Continuing the rogue security software series I've just stumbled upon a fake PestPatrol site - pest-patrol.com (85.255.121.181) host...

All You Need is Storm Worm's Love

›
The Storm Worm malware launched yet another spam campaign promoting links to malware serving hosts, in between a SQL injection related to St...
Monday, May 19, 2008

Fast-Fluxing SQL Injection Attacks

›
The botnet masters behind Asprox are converging tactics already, by fast-fluxing the SQL injected domains . Related URLs for this campaign :...

The Small Pack Web Malware Exploitation Kit

›
Yet another proprietary web malware exploitation kit has been released at the beginning of this month, further indicating that the efficient...
Saturday, May 17, 2008

Redmond Magazine SQL Injected by Chinese Hacktivists

›
Four Redmond related web properties appear to have been SQL injected by Chinese hacktivists , namely, Redmond - The Independent Voice of the...
Thursday, May 15, 2008

Got Your XPShield up and Running?

›
Don't. Continuing previous posts with three different portfolios of fake security software , and Zlob malware variants posing as video c...

DIY Phishing Kits Introducing New Features

›
Factual evidence on the emergence of individual phishing kits is starting to appear, with two more available in the wild. So what? For the t...