Virus Information News

[First]  [Previous] |    158     159     160     161     162     163     164     165     166     167    | [Next]  [Last] of 172 page(s)

How many ways can you remotely exploit an iPhone?

f-secure.com

August 4, 2010

At this point, you've probably read there are vulnerabilities in Apple's iOS that allow drive-by jailbreaks. And you also know that those vulnerabilities can be used for other drive-by exploits such as malicious attacks.

Many reports have mentioned that attackers could exploit iPhone owners by tricking them into visiting a specially crafted webpage. We have been asked: Just how do you trick somebody into opening such a webpage from a phone? What are the methods that could be used? So we did some lab tests using the jailbreak PDFs.

Rogue AV Masquerades as a Firefox/Flash Update

f-secure.com

July 28, 2010

It seems that rogue peddlers have gotten tired of their old tricks in pushing rogueware into the user's system. It used to be a fake scanning page, that leads to a warning, then a fake AV. Now, it comes as the Firefox "Just Updated" page.

LNK Vulnerability: Chymine, Vobfus, Sality and Zeus

f-secure.com

July 26, 2010

Here's the bad news: several additional malware families are now attempting to exploit Microsoft's LNK vulnerability. But here's the good news...

U.S. Declares iPhone Jailbreaking Legal, Over Apple's Objections

wired.com

July 26, 2010

Federal regulators lifted a cloud of uncertainty when they announced it was lawful to hack or jailbreak an iPhone.

Widespread fake Amazon orders lead to PDF malware

blog.commtouch.com

July 22, 2010

Well-crafted emails mimicking Amazon order confirmations have been detected in large quantities in the past week.  The Amazon logo and "your account" button actually take image files from the Amazon website.

LNK Vulnerability: Embedded Shortcuts in Documents

f-secure.com

July 21, 2010

Microsoft has updated Security Advisory 2286198 (version 1.2). "An exploit can also be included in specific document types that support embedded shortcuts."

HTML attachments - now with malware!

blog.commtouch.com

July 21, 2010

In the last few weeks we have detected increasing usage of HTML attachments in a variety of message types - all of them attempting to install malware.

Another Signed Stuxnet Binary - F-Secure Weblog : News from the Lab

f-secure.com

July 20, 2010

There's a couple of new developments in the Stuxnet rootkit case. Last night, the analysts in our Kuala Lumpur lab added detection for another digitally signed Stuxnet driver.

Code for Shortcut Zero-Day Exploit is Public

f-secure.com

July 19, 2010

If you're not following Mikko's Twitter feed, you may have missed yesterday's news that public proof of concept exploit code for the Windows shortcut (.lnk) vulnerability has been released.

Zero-Day Vulnerability in Windows Shell

f-secure.com

July 17, 2010

Microsoft has released Security Advisory 2286198, which provides details on the LNK shortcut (Windows Shell) vulnerability that's currently being exploited by the Stuxnet rootkit.

[First]  [Previous] |    158     159     160     161     162     163     164     165     166     167    | [Next]  [Last] of 172 page(s)