Virus Information News

[First]  [Previous] |    147     148     149     150     151     152     153     154     155     156    | [Next]  [Last] of 172 page(s)

Premium Rate SMS Trojans in Google's Android Market

F-Secure Weblog

by Sean

December 12, 2011

Premium rate SMS trojans were discovered in Google's Android Market earlier today.

The developer, named "Lagostrod", offered supposed free versions of many popular applications. And while Google has shut down the official market account, sites such as AppBrain still list the downloads.

FBI: Operation Ghost Click

F-Secure Weblog

by Sean

November 10, 2011

A US court has indicted seven men (6 Estonians and 1 Russian) as part of the US Federal Bureau of Investigation's Operation Ghost Click. Estonian authorities have made 6 arrests, the Russian defendant is still at large.

It's fair to say that Operation Ghost Click is very significant success in the fight against crimeware. Rove Digital (the gang's shell corporation) operated a very innovative DNSChanger click-fraud scheme which affected over 4 million computers and reported netted over 14 million dollars in ad-based revenue. Their operations were so successful that they even branched into Mac malware.

Running Windows Server 2008? Patch.

F-Secure Weblog

by Sean

November 9, 2011

This month's Microsoft Updates includes an interesting vulnerability.

Microsoft Security Bulletin MS11-083 "This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends a continuous flow of specially crafted UDP packets to a closed port on a target system."

Busy, Busy "Anonymous"

F-Secure Weblog

by Sean

November 7, 2011

The Internet Collective known as Anonymous had a busy "Guy Fawkes Weekend".

Here are a few highlights on their recent activities. Mexico: OpCartel is nixed. Anonymous claims the Zetas, a very dangerous Mexican drug cartel, released their kidnapped member with a message that many would be killed if names were leaked.

Duqu: Questions and Answers

F-Secure Weblog

by Sean

November 3, 2011

Due to its complexity, case Duqu is challenging to understand. Here are some questions and answers that we hope will help.

Duqu Attack's Installer Discovered

F-Secure Weblog

by Sean

November 2, 2011

Hungarian security firm CrySyS Lab has located the installer for Duqu, which is now well known for its connection to the infamous Stuxnet.

The installer arrived via e-mail as a document which then launches an exploit against a zero-day Windows kernel vulnerability. Very heavy stuff... Symantec was given the installer for analysis, and they've updated their whitepaper. There's quite a bit of additional detail...

Backdoor:OSX/Tsunami.A

F-Secure Weblog

by Sean

October 31, 2011

Tsunami is a Mac OS X backdoor with bot functionality.

The bot is capable of participating in DDoS attacks, and in fact, one variant attempts to connect to an IRC server with "anonops" in its name - as in (Internet collective) Anonymous Ops. Because there is no obvious infection vector for Tsunami, some analysts have speculated that OSX/Tsunami is a work in progress. Others have noted that remote hacking of a server is one possible vector. Given that OSX/Tsunami is based on a Linux bot that has long used PHP vulnerabilities to install, this is a definite possibility.

OpFake: Premium Rate SMS Trojan That Shares Code w/ Spitmo

F-Secure Weblog

by Sean

October 26, 2011

One of the more interesting cases we've analyzed this year is Spitmo, short for SpyEye in the mobile.

When some versions of SpyEye, an infamous banking trojan, encounter mTANs, a mobile-based defense against computer-based man-in-the-browser attacks, a counteroffensive is offered: Spitmo, a mobile trojan that circumvents the authentication process. It's a rather interesting crossover attack which uses clever techniques and code.

These Aren't the Droid Updates You're Looking For

F-Secure Weblog

by Sean

October 24, 2011

Our Threat Solutions team discovered an interesting threat using a novel "infection vector" for Android today.

Back in July, they analyzed Spyware:Android/SndApps, which, after an update, is able access various bits of personal information. Before the update, it only requests the "Internet" permission. It seems probable to us that users are less likely to carefully review permissions for an update of an application that is already installed on their smartphone. So with this permission escalation via an update method in mind, the team has been monitoring for malicious applications attempting the same trick. And today... they found one.

"Privacy is a way of managing information flow."

F-Secure Weblog

by Sean

October 18, 2011

Why are people so willing to give away their personal information to complete strangers?

It's because humans want to share information. And in fact, they share information a lot more freely than other "things" such as goods and services. Which of these are you most likely to provide without thinking much about it?...

[First]  [Previous] |    147     148     149     150     151     152     153     154     155     156    | [Next]  [Last] of 172 page(s)