Wednesday, February 11, 2009

Quality Assurance in a Managed Spamming Service

›
Following previous coverage of the managed spam services offered by the Set-X mail system and a copycat variant of it, a newly introduce...
Thursday, February 05, 2009

Summarizing Zero Day's Posts for January

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for January. You can also go through previous summaries for Dec...
Tuesday, February 03, 2009

A Diverse Portfolio of Fake Security Software - Part Fifteen

›
Descriptive fake security software domains speak for themselves, and what follows are the very latest ones currently active in the wild : sp...

Crimeware in the Middle - Adrenalin

›
What is Adrenalin? Adrenalin is an alternative to the Zeus crimeware kit that never actually managed to scale the way Zeus did. Following r...
Monday, February 02, 2009

Copycat Web Malware Exploitation Kits Are Still Faddish

›
The oversupply of web malware exploitation kits is in fact

The Template-ization of Malware Serving Sites - Part Two

›
The growing use of "visual social engineering" in the form of legitimately looking codecs, flash player error screens, adult web s...
Wednesday, January 28, 2009

Poisoned Search Queries at Google Video Serving Malware

›
UPDATE: A recently published article at the Register by John Leyden incorrectly states that " researchers at Trend Micro discovered t...
Tuesday, January 27, 2009

Embassy of India in Spain Serving Malware

›
The very latest addition to the "embassies serving malware" series is the Indian Embassy in Spain/Embajada de la India en España (...
Wednesday, January 21, 2009

Exposing a Fraudulent Google AdWords Scheme

›
UPDATE: Conduit's Director of Strategic Marketing Hai Habot contacted me in regard to the campaign. Comment published at the bottom of ...
Monday, January 19, 2009

A Diverse Portfolio of Fake Security Software - Part Fourteen

›
The following currently active fake security software domains have been included within ongoing blackhat SEO campaigns, among the many other...

Embedding Malicious IFRAMEs Through Stolen FTP Accounts - Part Two

›
The practice of using stolen or data mined -- from a botnet's infected population -- FTP accounts is nothing new. In March, 2008, a tool...
Wednesday, January 14, 2009

Pro-Israeli (Pseudo) Cyber Warriors Want your Bandwidth

›
This summary is not available. Please click here to view the post.

Domains Serving Internet Explorer Zero Day in December

›
December, 2008 was marked by yet another widespread Koobface campaign , next to a massive SQL injection attack targeting Asian countries an...
Wednesday, January 07, 2009

Dissecting the Bogus LinkedIn Profiles Malware Campaign

›
Nice catch, in the sense that LinkedIn was among the very few social networking sites left untouched by cybercriminals in 2008. With Linked...
Tuesday, January 06, 2009

Summarizing Zero Day's Posts for December

›
The following is a brief summary of all of my posts at Zero Day for December, 2008. You can also go through previous summaries for November...

Squeezing the Cybercrime Ecosystem in 2009

›
How do you trigger a change that would ultimately affect the entire cybercrime ecosystem? Going full disclosure may be the most logical opti...

Squeezing the Cybecrime Ecosystem in 2009

›
How do you trigger a change that would ultimately affect the entire cybercrime ecosystem? Going full disclosure may be the most logical opti...