August 2007 - Posts

PandaLabs Quarterly Report

Posted by Sergio Piñeiro at  31 August 07 11:45     Today we have published our Quarterly Report. The new Panda required a new look, so we have done our best to improve these reports. All the team hopes that you like them. Your comments are welcomed. Inside the report you can find plenty of information

Read More...


Easy money: affiliate programs

Posted by Vicente Martinez at  23 August 07 01:56     Today we’re going to describe one of the ways the cybercriminals use to earn some easy money. There are many marketing companies that promote web traffic to different Web pages, software installations, etc. They use what they call 'affiliate

Read More...


Has your credit card been stolen?

Posted by Luis Corrons at  23 August 07 01:58     In the last three months we have seen some activity regarding a bot C&C Server named Apophis. Here you can see a few screenshots: - Login: - Statistics: - Configuration: - Settings: - Templates: - And a few more: Today we have gained access to a new

Read More...


JavaScript de-obfuscation with Rhino

Posted by Ismael Briones at  06 August 07 09:00     Last Friday, I received a URL which used several exploits to spread malware. As always, I started to investigate it. As you may know, these sites use javascript to exploit web browser, ActiveX or third party vulnerabilities, and of course JS obfuscation

Read More...


July spyware list

Posted by Vicente Martinez at  01 August 07 01:50     This month, the first positions of the list are very similar to last month’s. 1.- Application/MyWebSearch 2.- Adware/Lop 3.- Adware/Gator 4.- Adware/ActiveSearch 5.- Spyware/Virtumonde 6.- Adware/Savenow Adware/VideoActiveXObject goes up from the 10th

Read More...