Tuesday, February 03, 2009

A Diverse Portfolio of Fake Security Software - Part Fifteen

›
Descriptive fake security software domains speak for themselves, and what follows are the very latest ones currently active in the wild : sp...

Crimeware in the Middle - Adrenalin

›
What is Adrenalin? Adrenalin is an alternative to the Zeus crimeware kit that never actually managed to scale the way Zeus did. Following r...
Monday, February 02, 2009

Copycat Web Malware Exploitation Kits Are Still Faddish

›
The oversupply of web malware exploitation kits is in fact

The Template-ization of Malware Serving Sites - Part Two

›
The growing use of "visual social engineering" in the form of legitimately looking codecs, flash player error screens, adult web s...
Wednesday, January 28, 2009

Poisoned Search Queries at Google Video Serving Malware

›
UPDATE: A recently published article at the Register by John Leyden incorrectly states that " researchers at Trend Micro discovered t...
Tuesday, January 27, 2009

Embassy of India in Spain Serving Malware

›
The very latest addition to the "embassies serving malware" series is the Indian Embassy in Spain/Embajada de la India en España (...
Wednesday, January 21, 2009

Exposing a Fraudulent Google AdWords Scheme

›
UPDATE: Conduit's Director of Strategic Marketing Hai Habot contacted me in regard to the campaign. Comment published at the bottom of ...
Monday, January 19, 2009

A Diverse Portfolio of Fake Security Software - Part Fourteen

›
The following currently active fake security software domains have been included within ongoing blackhat SEO campaigns, among the many other...

Embedding Malicious IFRAMEs Through Stolen FTP Accounts - Part Two

›
The practice of using stolen or data mined -- from a botnet's infected population -- FTP accounts is nothing new. In March, 2008, a tool...
Wednesday, January 14, 2009

Pro-Israeli (Pseudo) Cyber Warriors Want your Bandwidth

›
This summary is not available. Please click here to view the post.

Domains Serving Internet Explorer Zero Day in December

›
December, 2008 was marked by yet another widespread Koobface campaign , next to a massive SQL injection attack targeting Asian countries an...
Wednesday, January 07, 2009

Dissecting the Bogus LinkedIn Profiles Malware Campaign

›
Nice catch, in the sense that LinkedIn was among the very few social networking sites left untouched by cybercriminals in 2008. With Linked...
Tuesday, January 06, 2009

Summarizing Zero Day's Posts for December

›
The following is a brief summary of all of my posts at Zero Day for December, 2008. You can also go through previous summaries for November...

Squeezing the Cybercrime Ecosystem in 2009

›
How do you trigger a change that would ultimately affect the entire cybercrime ecosystem? Going full disclosure may be the most logical opti...

Squeezing the Cybecrime Ecosystem in 2009

›
How do you trigger a change that would ultimately affect the entire cybercrime ecosystem? Going full disclosure may be the most logical opti...
Wednesday, December 17, 2008

Cyber Jihadists part of the GIMF Busted

›
In one of those "better late than never" type of situations, last month members of the Global Islamic Media Front were busted in ...
Monday, December 15, 2008

Skype Phishing Pages Serving Exploits and Malware - Part Two

›
Dear malware spreader, here we meet again. It's been a while since I last wrote to you, half an year ago to be precise . Since I first m...

Localized Social Engineering on Demand

›
If I were to come across this service last year, I'd be very surprised. But coming across it in 2008 isn't surprising at all, and th...

Localized Social Engineering on Demand

›
If I were to come aross this service last year, I'd be very surprised. But coming across it in 2008 isn't surprising at all, and tha...