Monday, August 10, 2009

U.S Federal Forms Blackhat SEO Themed Scareware Campaign Expanding

›
UPDATE2: New scareware domain is in rotation - antispywarelivescanv5 .com - 83.133.123.174; 83.133.126.155; 91.212.107.5; 94.102.48.29; 9...
Thursday, August 06, 2009

Blackhat SEO Campaign Hijacks U.S Federal Form Keywords, Serves Scareware

›
During the past 24 hours, a blackhat SEO campaign has been hijacking U.S Federal Forms related keywords in an attempt to serve scareware. W...
Wednesday, August 05, 2009

Scareware Template Localized to Arabic

›
A "new tactic" is supposedly being used as a Blue Screen of Death scareware template with a single missing fact "for the rec...
Tuesday, August 04, 2009

Movement on the Koobface Front

›
Now that the Koobface gang is no longer expressing its gratitude for the takedown of its command and control servers , the group has put it...

Movement on the Koobface Front

›
Now that the Koobface gang is no longer expressing its gratitude for the takedown of its command and control servers , the group has pu...

Managed Polymorphic Script Obfuscation Services

›
Cybecriminals understand the value of quality assurance, and have been actively running business models on the top of it for the past two ye...
Monday, August 03, 2009

Summarizing Zero Day's Posts for July

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for July. You can also go through previous summaries for June ,...
Thursday, July 30, 2009

Social Engineering Driven Web Malware Exploitation Kit

›
The standardization through template-ization of bogus codec/flash player/video pages , taking place during the past two years, has exponent...

Social Engineering Driven Web Malware Exploitation Kit

›
The standardization through template-ization of bogus codec/flash player/video pages , taking place during the past two years, has exponent...
Wednesday, July 29, 2009

5th SMS Ransomware Variant Offered for Sale

›
" Your system has been blocked because it is running a pirated copy of Windows. In order to unblock it, enter the activation code sent ...
Monday, July 27, 2009

A Diverse Portfolio of Fake Security Software - Part Twenty Three

›
Part twenty three of the diverse portfolio of fake security software series, will once again summarize the scareware domains currently in ci...
Wednesday, July 22, 2009

Koobface - Come Out, Come Out, Wherever You Are

›
UPDATE2: New binaries are hosted at web.reg .md/1/ pdrv.exe ; web.reg .md/1/ pp.10.exe and at web.reg .md/1/ fb.49.exe . UPDATE: The Koobf...