Virus Information News

[First]  [Previous] |    141     142     143     144     145     146     147     148     149     150    | [Next]  [Last] of 172 page(s)

The United States of ZeroAccess

F-Secure Weblog

by Sean

September 20, 2012

Monday's post included a screenshot of the ZeroAccess botnet as visualized in Google Earth.

Well, we've finished cleaning up the KML file which now includes 139,447 bot locations based on IP addresses associated with approximately 2,600 samples. ZeroAccess is a very large botnet and there are millions of infections globally. Here's the USA...

ZeroAccess: We're Gonna Need a Bigger Planet

F-Secure Weblog

by Sean

September 17, 2012

Some botnets are so big you can see them from space (or at least, Google Earth). Here's what the ZeroAccess botnet looks like in Europe.

Cosmo The Hacker God

F-Secure Weblog

by Sean

September 13, 2012

In early August, Wired.com Gadget Lab writer, Mat Honan, experienced an "epic hacking". His own.

Mat's iPhone, Mac, and Google account were obliterated - and all because the hackers wanted access to his three character (@mat) Twitter account. (YouTube: Our thoughts on the hacking of @mat.) It took considerable effort (and cost!) to recover Mat's data. Naturally, Mat has developed a strong interest in the types of social engineering methods which were used to "hack" his accounts. And a member of one of this year's most infamous hacker gangs, UGNazi (@UG) contacted @mikko to offer his assistance.

A Map of Gameover (P2P ZeuS) Variants

F-Secure Weblog

by Sean

September 7, 2012

Our back end automation began logging "Gameover" related IP addresses back in May. Gameover is the Peer-to-Peer variant of the ZeuS banking trojan. Last week, we took 3,300+ of the IPs and performed a GeoIP lookup on them.

On the International Law Applicable to Cyber Warfare

F-Secure Weblog

by Sean

September 3, 2012

The NATO Cooperative Cyber Defence Centre of Excellence (an independent "International Group of Experts") has published a draft of its not so light reading titled: The Tallinn Manual on the International Law Applicable to Cyber Warfare.

t's well worth your time if you're at all interested in how existing international law applies to cyber conflicts, something the CCD COE refers to as a "new" form of warfare. Rule 30: Definition of Cyber Attack...

Tips For Java Junkies

F-Secure Weblog

by Sean

September 3, 2012

So, according to our recent poll, only 12% of you don't have Java Runtime Environment (JRE) installed. And the rest of you (88%) are Java junkies to one degree or another.

Okay, well, for the 41% of you that have Java installed and also have browser plugins enabled, we hope you're at least using Java via Google Chrome, which prompts the user for permissions each time it comes across Java.

Java SE 7u7 AND SE 6u35 Released

F-Secure Weblog

by Sean

August 30, 2012

Oracle has released an update for Java, version 1.7.0_07. Also of note, there's a version 1.6.0_35 that also patches vulnerabilities.

Java Runtime Environment = Perpetual Vulnerability Machine

F-Secure Weblog

by Sean

August 28, 2012

Well folks... the perpetual vulnerability machine that is Oracle's Java Runtime Environment (JRE) has yet another highly exploitable vulnerability.

And it's being commoditized at this very moment and will very soon find its way into popular exploit kits such as Blackhole. Then, if you happen to have Java (JRE) installed, and have the browser plugin(s) enabled... you're at risk of a drive-by download. Based on the details we've examined thus far, all browsers can be exploited (though Chrome seems to be a bit of an open question).

Your Source For More Sophisticated Intel

F-Secure Weblog

by Sean

August 17, 2012

The amount of malware in the world can be counted in many different ways. Here at F-Secure Labs, we prefer a more conservative approach to enumerate threats.

A ZeuS variant that asks: No sound? No way.

F-Secure Weblog

by Sean

August 16, 2012

We rely on a good amount of automation and virtualization in our battle against malware. Our opponents, malware authors, know this and they frequently employ new tactics to avoid being processed by our back end systems.

One particularly prevalent threat is a "banking trojan" called ZeuS. In the past, we've written about a ZeuS variant that might not infect slow computers as a result of aggressive anti-debugging techniques. Well, today we analyzed a recent ZeuS variant and discovered that it checks to see if its environment is "normal" by looking for the presence of an audio card from the Windows Registry.

[First]  [Previous] |    141     142     143     144     145     146     147     148     149     150    | [Next]  [Last] of 172 page(s)