February 2009 - Posts

Rogue Fake Codec - Finding the differences

Posted by Asier Martínez at 27 February 09 12:53 In the last days we have received a good number of new variants of rogue fake codec. That’s why we propose you a little game that consists in finding the differences between the images: All these variants have been detected as Adware/VideoPlay .

Category: Rogueware

Can we cope with the increasing malware?

Posted by Sean-Paul Correll at 27 February 09 12:17 Recently, we published the latest bulletin about the steep increase of Banker Trojans. Today we have massive amounts of malware circulating the Web and most of them are Financial/Identity Theft related. See the report: here The increase in the volume

Malware in Social Media

Posted by Sean-Paul Correll at 26 February 09 06:17 A few weeks ago we talked about cyber-criminals using Digg.com to spread malware . Today we see that the very same group responsible for the Digg.com incident was using the same tactic on YouTube through the use of YouTube's Annotations feature. Video

Category: Malware, Malicious links, Social Media, YouTube, PornTube

Good (?) old times II

Posted by Asier Martínez at 25 February 09 04:19 Some days ago we talked about how old infection techniques had emerged and how malware with economic goals had been combined with traditional viruses. Today, we have come across an interesting case with regard to one of the rogue morphs that has been

Category: Rogueware

Bank details uncovered

Posted by Oscar Cavada at 20 February 09 12:07 Olaiz, Technical writer at PandaLabs, has just published an interesting document about one of the main threats to users' privacy: Banking Trojans. Among other things, you can find information about how they enter computers and how they steal information.

MS09-002 Exploit in the Wild

Posted by Sean-Paul Correll at 19 February 09 04:34 Last Tuesday Microsoft released a Security Bulletin ( MS09-002 ) for critical vulnerabilities which affected its Internet Explorer browser. The vulnerability exists because of improper error handling when accessing deleted objects and allows remote code

Category: Exploit, Microsoft, Patch

Good (?) old times

Posted by Luis Corrons at 17 February 09 06:28 Right now we are dealing with about 25,000 new malware samples per day. From time to time we remember the old days, when we were almost fighting each other in order to disassemble the latest virus we had received in the lab. Well, what were you expecting?

Category: Malware

Defacement archive of Zone-H gets defaced

Posted by Xabier Francisco at 17 February 09 04:28 Several days ago, one of the main archives which contain records of the web defacement attacks carried out all over the world has been victim of web defacement. It is not the first time that Zone-H.org has received this type of attacks, as in January

Blogger Summit recap

Posted by Sean-Paul Correll at 12 February 09 11:46 Last week, Panda Security hosted the First Security Blogger Summit at the Círculo de Bellas Artes in Madrid. Over 200 people involved in IT security attended this inaugural event that included 11 security thought leaders debating in an engaging

Microsoft Updates - February 2009

Posted by Xabier Francisco at 11 February 09 06:25 Microsoft has published the security bulletins MS009-02, MS009-03, M009-04 and MS009-05, which refer to 8 vulnerabilities. 3 are critical and 2 of them affect the Internet Explorer browser again. These 2 vulnerabilities could allow remote code execution

San Valentine´s day is close...

Posted by Oscar Cavada at 10 February 09 12:07 There are only 4 days left for Saint Valentine’s Day and this special date is being used again by the worm Waledac to spread itself. The last variant that use this romantic subject to spread is W32/Waledac.J.worm. The email messages that are being

Ever heard the term "Rickrolling"? Malware distributors have...

Posted by Sean-Paul Correll at 09 February 09 11:21 Rickrolling is an Internet meme typically involving the music video for the 1987 Rick Astley song "Never Gonna Give You Up". The meme is a bait and switch: a person provides a web link that he or she claims is relevant to the topic at hand,

Category: Social Networks, Malicious links, Rickroll

Facebook Phishing Site Targets French Users

Posted by Sean-Paul Correll at 05 February 09 12:18 Today I discovered a new Facebook phishing site targeting French users. The login page looks identical to the official Facebook site, but the phishing site passes the victims credentials through a submission form before redirecting them to the official

Category: Phishing, Anti-Phishing, Social Networks, Tips

AMTSO 2009

Posted by Luis Corrons at 03 February 09 05:14 This week a new AMTSO meeting hosted by Symantec is taking place in Cupertino (California). We are working on different documents that we had already started in the last AMTSO meeting in Oxford, from "in The Cloud Testing" to Review the Reviews",

Rogue ScanVirus site impersonates SaaS Anti-Virus

Posted by Sean-Paul Correll at 03 February 09 02:23 Today we discovered a new site using an interesting tactic to trick users into infecting themselves with malware. This time the cyber-criminals opted to pretend to be a Software as a Service (SaaS) Anti-Virus solution. The "Scan Virus" website

Category: Malware, SaaS, Trojan, Adware

February 2009 - Posts

Rogue Fake Codec - Finding the differences

Can we cope with the increasing malware?

Malware in Social Media

Good (?) old times II

Bank details uncovered

MS09-002 Exploit in the Wild

Good (?) old times

Defacement archive of Zone-H gets defaced

Blogger Summit recap

Microsoft Updates - February 2009

San Valentine´s day is close...

Ever heard the term "Rickrolling"? Malware distributors have...

Facebook Phishing Site Targets French Users

AMTSO 2009

Rogue ScanVirus site impersonates SaaS Anti-Virus

Categories

Archives

Favourites

Site feed