Virus Information News

[First]  [Previous] |    159     160     161     162     163     164     165     166     167     168    | [Next]  [Last] of 172 page(s)

"Hacked By Turkish Hackers"?

f-secure.com

June 21, 2010

For the past 12 hours, over 1000 Twitter accounts have been hacked with an unknown method.

FIFA World Cup Spurs Targeted Spam

WHIR Web Hosting Industry News

June 17, 2010

According to Symantec, Brazil's early World Cup lead may also be giving it the unfortunate distinction of being the focus of targeted attacks.

Symantec intercepted a run of 45 targeted malware emails on June 2 en route to a number of Brazilian companies. The emails attempt to draw in World Cup fans by spoofing a well-known sportswear manufacturer sponsoring the FIFA World Cup. Symantec noted that the most interesting aspect of the attack is that It uses two attack modes, a PDF attachment and a malicious link, meaning that even if the malicious PDF attachment is removed by an anti-virus gateway, the malicious link remains in the body of the email and may still be delivered to the recipient.

All Your Farm Are Belong To Us

f-secure.com

June 17, 2010

Zynga's FarmVille is a popular social networking game and perhaps it should come as little surprise that many players want to learn FarmVille secrets and cheats.

The Risk is There: Researchers Connect Pornography and Malware

blog.opendns.com

June 16, 2010

When the study's researchers surveyed adult websites, they found that many were aimed at "manipulating and misleading a visitor to perform actions that result in an economic profit" for the Web site.

Free sites used these tactics 34 percent of the time, while paid sites used them 11 percent of the time. What types of tactics are we talking about? According to the study, methods include: * Javascript catchers that hijack the user's browser, making it difficult to leave a site. * Blind and hidden links that prevent an address from being displayed in a web browser's status bar. This can be used to mask malicious activities, like cross site scripting or cross site request forgery attempts. * Redirection scripts that redirect users to different websites. This occurs on a server, so there's no way for a user to know it might happen until they click. * Malware that triggers malicious behavior including "code execution, registry changes, or executable downloads."

Reset your Twitter password - Malware

blog.commtouch.com

June 15, 2010

Commtouch labs have received scores of emails targeting twitter users. The emails have been neatly constructed to include the email address within the email - making them look more genuine.

Recipients are asked to open an attached html file to view their new password. The website that loads contains a browser exploit. Not very friendly...

Trojans Comprise 70 percent of All Malware

thewhir.com

June 15, 2010

The volume of malware has climbed considerably since the beginning of the year, and Trojans comprise nearly three-quarters of all malware sent by email.

Facebook Spam App Du Jour

f-secure.com

June 14, 2010

There's yet another Facebook spam application on the run. It uses this string of text to lure folks: "I am shocked!!! The teacher nearly killed this boy..."

Windows Help Vulnerability Disclosure

blogs.technet.com

June 10, 2010

We are aware of a publicly disclosed vulnerability affecting Windows XP and Windows Server 2003. We are not aware of any current exploitation of this issue.

This issue was reported to us on June 5th, 2010 by a Google security researcher and then made public less than four days later, on June 9th, 2010. Public disclosure of the details of this vulnerability and how to exploit it, without giving us time to resolve the issue for our potentially affected customers, makes broad attacks more likely and puts customers at risk. We will be releasing a security advisory today with additional guidance and our teams are already working to address the core issue. In the meantime, customers can unregister the HCP protocol to protect themselves using the following steps...

Online Attack Infects Wall Street Journal, Jerusalem Post

thewhir.com

June 10, 2010

A massive online attack this week that compromised parts of the Jerusalem Post and the Wall Street Journal websites could have infected more than 114,000 websites.

According to sources within the online security community, hackers were able to post a malicious script on the affected sites, which appears to redirect victims. This malicious server attempts to install software locally on visitors' computers that gives the hackers a way to remotely control victims' PCs. According to Sucuri Security, the commonalities between all the affected sites is that they are all hosted on Microsoft IIS servers and use ASP.net. Sucuri Security said the attack "looks like a SQL injection attack against a third party ad management script." This attack appears to be the latest in a trend towards more sophisticated and bold attacks that threaten legitimate websites identified by anti-malware service provider Dasient. A key factors in these infections, according to Dasient, is the proliferation of ways in which sites can get infected, such as externally hosted javascript widgets, and third-party ad networks hijacked with "malvertisements."

Exploit.PDF-Dropper.Gen

f-secure.com

June 9, 2010

The lab is currently seeing a spam run pushing a PDF exploit. This PDF attachment is not utilizing the critical Flash vulnerability, it's attempting to use the PDF /launch feature.

The timing of this spam run seems a bit odd as it isn't using the current vulnerability, but perhaps the gang which uses this particular tactic knows that there's about to be a big push to update Adobe Reader. Current versions of Reader include the Trust Manager feature, and so this gang's window of opportunity will be narrowing soon.

[First]  [Previous] |    159     160     161     162     163     164     165     166     167     168    | [Next]  [Last] of 172 page(s)