April 2008 - Posts

Looks can be deceiving

Posted by Oscar Cavada at  30 April 08 06:00     We have recently detected another spam message that contains a malicious URL. This is nothing new, but what if you receive an email message coming from a reliable source, such as a security company? This is what has happened with a spam message that uses

Read More...

IFRAMES Attack !!! (Update II)

Posted by Xabier Francisco at  28 April 08 11:58     The first thing we observed when we analysed the attack which included an iframe pointing to a malicious website in hundreds of thousands of web pages was that all the compromised websites were in servers with IIS and MSSQL. Initially, the most likely

Read More...

IFRAMES Attack !!! (Update)

Posted by Xabier Francisco at  25 April 08 02:19     This graph is an example of the infection process that takes place from the moment when a user accesses a legitimate website that has been modified until the possible infection is effective. Thanks to Oscar and Olaiz for their collaboration.

Read More...

IFRAMES Attack !!!

Posted by Xabier Francisco at  24 April 08 07:27     Nowadays it is usually taken for granted that we can only get infected if we visit malicious websites or run files coming from untrustworthy sources. However, lately we have detected several cases in which by exploiting vulnerabilities in the web servers

Read More...

Kiss me!!!

Posted by Oscar Cavada at  16 April 08 01:06     Several years ago, the main aim of cyber-crooks was to achieve notoriety with their creations, that is, to be famous. In order to do so, they wanted to attract as much attention as possible and causing massive epidemics was their springboard to fame Their

Read More...

Microsoft Updates for April

Posted by Ismael Briones at  09 April 08 12:34     Five critical and three important updates have been released (from MS08-018 to MS08-025). It's time to start updating your system if you haven't done it yet. Critical updates affect these components: Microsoft Project, GDI, VBScript and JScript

Read More...

You are nominated…to distribute malware!!! (II)

Posted by Xabier Francisco at  04 April 08 02:11     Big Brother Brasil again. I am not very fond of this type of programs, but spammers have made me pay attention to them . J Then, we wondered who would be the following participant selected to distribute malware. We thought they would make the selection

Read More...

April Fools' Day malware

Posted by Luis Corrons at  01 April 08 02:10     The social engineering never ends. Today is April Fools' Day, and we have received a spam message with a link, similar to the ones we could see in Saint Valentine . Some of the subjects we have seen so far: - Today's Joke! - Happy All Fools! -

Read More...

Quarterly Report January-March 2008

Posted by Xabier Francisco at  01 April 08 12:42     We have just published the latest PandaLabs Quarterly Report. There, you can find statistics and information about the current situation of malware as well as different sections analyzing the most interesting events of the first quarter. Regarding malware,

Read More...