October 2006 - Posts

Death Star

Posted by Luis Corrons at  23 October 06 01:04     Regarding malware, on some occasions we have made graphic representations of it. This reminds me of a study carried out in PandaLabs that dealt with analyses of malware families, in which the similarities among variants of the same family could be observed

Read More...

Attachment(s): gaobot_graph.JPGf


The future is here

Posted by egonzalez at  22 October 06 05:09     The square evolved to the circle, and the floppy disk evolves to USB. There is a PoC of a "piece of malware" (discussion may start here about its real nature), capable of stealing information. Amazing, isn't it? The evolution comes on the

Read More...


Spam as a financial tool (II)

Posted by Luis Corrons at  20 October 06 05:14     The Mexican one was not a success as far as we can see. But we are seeing a lot of similar spam messages everyday, here is an example:

Read More...

Attachment(s): spammessage.jpgf


VML, Viking and Lineage... Any further bids?

Posted by egonzalez at  20 October 06 05:12     We have been aware of a site hosting a page that exploits the VML vulnerability. Through this exploit, it downloads a W32/Viking variant. This Viking downloads several Trj/Lineage variants. And finally, these Lineage variants are responsible for gathering

Read More...


Spam as a financial tool

Posted by Luis Corrons at  19 October 06 03:12     Everyone knows that spam is used to advertise all kind of products and that hackers use it in other ways (installing malware through exploits, etc.). The message usually links to an external site, but it's not always like that. We have recently seen

Read More...

Attachment(s): spamgraph.jpgf


Spamta.CY

Posted by Luis Corrons at  18 October 06 05:15     This is a heads up. Today we have received several submissions of the email worm Spamta.CY . During the last days we have seen many variants (right now we are on the DD one) and some of them have caused some incidents. Not an alert but a heads up. TruPrevent

Read More...