Virus Information News

[First]  [Previous] |    10     11     12     13     14     15     16     17     18     19    | [Next]  [Last] of 172 page(s)

Every Month is Red October

F-Secure Weblog

by Secresponse

January 15, 2013

By now, you've probably read the news about "Red October" and you're wondering how worried you should be? Red October is the latest AV industry case study of digital espionage.

From a technical point of view Red October looks very much like any other targeted corporate espionage attack. The attackers use exploit documents with credible looking content so the victim will open the file, drop a malicious payload to the infected device, and start mining all information they can from the infected system. It appears the exploits used were not advanced in any way. The attackers used old, well-known Word, Excel and Java exploits. So far, there is no sign of zero-day vulnerabilities being used.

On the Topic of AV Being Useless

F-Secure Weblog

by SecResponse

January 10, 2013

I have lately been following and participating in discussions as to whether or not antivirus products are useless and just waste of money.

And as I am employed by F-Secure, my position on the matter may be rather obvious. But rather than going on with the same tired argument, I would like to shine some attention to some common patterns and misconceptions that repeat themselves in almost all discussions...

Cool-er Than Blackhole?

F-Secure Weblog

by Secresponse

November 16, 2012

Exploit kits are still making rounds, nothing new there. But in addition to the popular Blackhole Exploit Kit, a new kid on the block emerges which has been dubbed as Cool Exploit Kit.

It's very interesting to see how these two actually fare against each other... Lately, we're seeing that Blackhole updated to the latest PluginDetect version 0.7.9, which has already been used by Cool. We've also seen Blackhole exploit the font vulnerability (CVE-2011-3402) that Cool has been exploiting.

Police Themed Ransomware Continues

F-Secure Weblog

by Secresearch

April 4, 2012

Over the last several weeks, we've been monitoring a rash of ransomware campaigns across Europe, in which messages, supposedly from the local police, are displayed demanding that a fine must be paid in order to unlock the computer.

We wrote about a Finnish language variant last month. Attacks are still quite active according to our statistics. Even when somebody is savvy enough to recognize the message is a fake, the malware's accusations of offensive materials having been discovered on the user's hard drive creates a chilling effect, which has likely prevented some folks from seeking outside help.

SANS: No Safety From Vulnerabilities

Internet News

by Sean Michael Kerner

July 25, 2005

IE vulnerabilities still abound, but Apple, Mozilla and Real Player users have little to gloat about.

There were 422 newly reported Internet security vulnerabilities in the second quarter of 2005, according to the SANS Institute. The number represents a 20 percent year-over-year and an 11 percent quarterly increase in reported vulnerabilities. SANS' quarterly update of the top 20 list of Internet vulnerabilities, released Monday, identifies the most critical of the 422 that resulted in widespread damage to both enterprise and home users. Six different vendors made the list, including Microsoft, Mozilla, Apple, Real Networks, Computer Associates and Veritas.

Banner Ads Serving Up MyDoom

internetnews.com

by Sean Michael Kerner

November 22, 2004

New move in virus battle renders banner ads susceptible to MyDoom variant. A chilling turn in the war against viruses appeared over the weekend. It looks like viruses are now being spread unsuspectingly through Web sites via compromised ad servers.

The SANS Institute Internet Storm Center on Saturday reported that a 'high profile UK website' was among those that had been hit. On Sunday, The Register confirmed on a note on its site that, "early on Saturday morning some banner advertising served for The Register by third-party ad serving company Falk AG became infected with the Bofra/IFrame exploit."

Trojan:Android/Pincer.A

F-Secure Weblog

by Sean

April 5, 2013

Protip: don't install an Android application package file if it's named "Certificate.apk". It's not legit (obviously).

Trojan:Android/Pincer.A is able to forward SMS messages and perform other actions based on commands it receives from its C&C. When installed, it will appear in the application menu as "Certificate" and will display related bogus messages when run.

Cutwail Spam Botnet Targeting Android Users

F-Secure Weblog

by Sean

April 4, 2013

Brett Stone-Gross of Dell SecureWorks has excellent analysis of Android malware being distributed via the Cutwail spam botnet.

Facebook Claims it's a "Bug"

F-Secure Weblog

by Sean

April 3, 2013

Yesterday's post noted the disappearance of Facebook's option to clear searches. Zach Miners, of IDG News Service, investigated the situation and was told by Facebook: "Its disappearance was caused by a bug and was not intentional."

A bug? Really. What a complete load of bollocks. When your company motto is "Move Fast and Break Things", I'm rather more inclined to believe it's a case of oversight, human error, and/or incompetence. Or perhaps "bug" is Facebook lingo for "oops, my bad"?

Facebook removes a privacy control, surprised?

F-Secure Weblog

by Sean

April 2, 2013

In general, I think many people tend to trust Google more than Facebook. Any thoughts from my followers on why that might be? -- Joey Tyson (privacy and security engineer at Facebook)

Tyson, a.k.a. Social Hacking, is a privacy advocate, and was long before he began working for Facebook. He's asking an important question. Why do people trust Google more than Facebook? Well here's an example of why...

[First]  [Previous] |    10     11     12     13     14     15     16     17     18     19    | [Next]  [Last] of 172 page(s)