June 2009 - Posts

June's Crypto Challenge Results

Posted by Sean-Paul Correll at  17 June 09 11:45     June's Crypto Challenge has now came to a close and I'm glad to report that several participants were able to complete the challenge successfully. I've posted the solution below for everyone to see, so click here if you want to try and solve

Read More...

Category: Cryptography, Challenges

Visualizing the Twitter Trends Attack

Posted by Sean-Paul Correll at  11 June 09 10:15     Post Updated on 6/24/09 at 7:52 PM For the past few weeks, cyber criminals have been targeting Twitter users by creating thousands of messages (tweets) embedded with words involving trending topics and malicious URLs. If the URLs were accessed, the victims

Read More...

Category: Rogueware

More rogueware campaigns on Twitter...

Posted by Luis Corrons at  05 June 09 01:17     Again cybercriminals are using the Trending Topics to spread rogueware. In this case the Trending Topic is David Carradine: When you click on the links you go to this website: Or this one: Or many other similar ones. And at the end you will have installed

Read More...

Cyber Criminals Exploit Drupal CMS to Distribute Malware

Posted by Sean-Paul Correll at  05 June 09 01:32     In a previous post , I stressed the importance of updating web applications frequently. Cyber criminals are always on the lookout for newly exploitable distribution methods and will go to great lengths to take advantage of any website. It may not be widely

Read More...

Category: Rogueware, CMS, Security, Web Applications, SQL Injection

Two years of Collective Intelligence

Posted by Luis Corrons at  04 June 09 04:55     I still remember the very first meeting we started talking about the cloud three years ago. It was 2006, a sunny day, and a few of us were meeting in a room on the 7th floor of our old building. Mikel Urizarbarrena, our founder, started talking about

Read More...

Rogueware campaign on Twitter continues...

Posted by Sean-Paul Correll at  04 June 09 10:13     The Twitter Trends based attack we blogged about yesterday has expanded from just one trend to nearly all of them! Over the past 24 hours, there have been several thousand tweets targeting trending topics on Twitter and the numbers continue to rise. Example

Read More...

Category: Rogueware, Twitter, flash_player_plugin.exe, Trends

Cyber Criminals Target Air France, YouTube, E3, Microsoft, Project Natal, and more…

Posted by Sean-Paul Correll at  03 June 09 01:53     It seems like these days every other news breaking story is paralleled with a similar Blackhat SEO fueled Rogueware campaign. Today, Luis Corrons and I were talking about Microsoft’s recently announced Project Natal when his Google search for a

Read More...

Category: Rogueware, Microsoft, YouTube, Blackhat SEO, E3

Rogueware Campaigns blending in with Twitter Trends

Posted by Sean-Paul Correll at  03 June 09 10:23     Update: 6/4/09 - Rogueware campaign on Twitter continues... "PhishTube Broadcast" became a trending topic on Twitter today. The word “tube” is a big red flag to any Threat Researcher these days, so naturally I had to investigate

Read More...

Category: Rogueware, Twitter, Blackhat SEO

Crypto Challenge

Posted by Sean-Paul Correll at  02 June 09 02:41     Those of you who already follow me on Twitter know that every once in a while I throw together a quick, geeky puzzle for everyone to solve. After my last challenge, a few people asked me to make the next puzzle a little bit harder to solve. This meant

Read More...

Category: Cryptography, Contest, Twitter