Thursday, May 26, 2011

A Peek Inside the Vertex Net Loader

›
It appears that the author of the of the DarkComet RAT has been keeping himself rather busy. In early-stage development (currently in BETA),...

A Peek Inside the Vertex Net Loader

›
It appears that the author of the of the DarkComet RAT has been keeping himself rather busy. In early-stage development (currently in...
Wednesday, May 25, 2011

Keeping Money Mule Recruiters on a Short Leash - Part Eight - Historical OSINT

›
With money mule recruitment scams continuing to represent an inseparable part of the cybercrime ecosystem, in this post I'll summarize t...

Keeping Money Mule Recruiters on a Short Leash - Part Eight - Historical OSINT

›
With money mule recruitment scams continuing to represent an inseparable part of the cybercrime ecosystem, in this post I'll summariz...
Tuesday, May 10, 2011

Keeping Money Mule Recruiters on a Short Leash - Part Seven

›
Continuing the what has turned into a tradition, the " Keeping Money Mule Recruiters on a Short Leash " series, in this post we...
Monday, May 09, 2011

A Peek Inside a New DDoS Bot - "Snap"

›
Sampling malicious activity through the eyes of the cybercriminal, is always beneficial in the context of timely spotting valuable trends a...

Don't Play Poker on an Infected Table - Part Five

›
A currently spamvertised campaign is enticing end users into downloading a fraudulent online gambling application KingSpinEN.exe . The campa...

Summarizing ZDNet's Zero Day Posts for April

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for April. You can subscribe to my personal RSS feed , Zero...
Thursday, April 28, 2011

Spamvertised "Successfull Order 977132" Leads to Scareware

›
A currently ongoing malware campaign is impersonating Bobijou Inc for malware-serving purposes. Sample subject: " Successfull Order 97...
Tuesday, April 12, 2011

Spamvertised "Reqest Rejected" Campaign Serving Scareware

›
A currently spamvertised scareware-serving campaign is enticing end users into downloading and executing a malicious binary, which drops a s...
Monday, April 11, 2011

Don't Play Poker on an Infected Table - Part Four

›
A currently spamvertised campaign is enticing users into downloading and executing a fraudulent online gambling application known as VegasVI...
Monday, April 04, 2011

Summarizing Zero Day's Posts for March

›
The following is a brief summary of all of my posts at ZDNet's Zero Day for March. You can subscribe to my personal RSS feed , Zero...

Spamvertised DHL Notifications Scareware Campaign

›
Yet another currently spamvertised campaign is impersonating DHL for scareware serving purposes. Sample subjects: DHL notification #random ...