July 2009 - Posts

Greetings from Las Vegas

Posted by Luis Corrons at  29 July 09 10:30     Today, Sean-Paul and I are at the Blackhat Conference to discuss our latest research on the Rogueware economy. We have been meeting with many people in the last few days and we most recently spoke at the SecurityBsides conference. We published the full

Read More...

3rd Panda Challenge solution & winners

Posted by Luis Corrons at  27 July 09 06:22     The 3rd and final Panda Challenge has ended. You had to find out some hiddent text, and that was it: "Panda Cloud Antivirus provide Advanced Protection against new and uNknown viruses. cloudAntivirus " And the winner of the Amazon Gift Card

Read More...

Panda Challenge: Hard Level

Posted by Luis Corrons at  20 July 09 01:47     Welcome to the final Panda Challenge. This is the hard one; let's see who can solve it first. In the medium one we had just a few right answers. Carlos has been the creator of this challenge, and this is what he wants you to know before starting:

Read More...

2nd Panda Challenge solution & winners

Posted by Luis Corrons at  20 July 09 01:05     As I promised, this challenge was going to be quite more difficult. Here you have the solution: The file we created is a program which receives data via the standard input and prints data via the standard output. The program is a generator of random 50x50

Read More...

Panda Challenge: Medium Level

Posted by Luis Corrons at  13 July 09 12:47     Welcome to the 2nd Panda Challenge. As promised, this will be harder. In the previous one we had more than 1 thousand downloads and just 44 right answers, let's see how this goes. Joxean has been the creator of this challenge. This are the "instructions"

Read More...

Category: Contest, Challenges

1st Panda Challenge solution & winners

Posted by Luis Corrons at  13 July 09 11:21     First of all, let me thank you all for having participated in this challenge. The solution to this challenge is described below: The binary was packed in UPX, and we changed a section name to .reloc, to make it “uncomfortable” while using

Read More...

Koobface.DU returns to Twitter

Posted by Sean-Paul Correll at  10 July 09 12:15     A few days ago the Koobface worm started to appear on Twitter . Today, the Koobface worm returns by hijacking several Twitter user accounts to assist in propagating the worm. The malicious tweets start with the text “My Home Video :)” followed

Read More...

Category: Social Media, Rogueware: Worms

DDoS attacking US and South Korea government sites

Posted by Luis Corrons at  08 July 09 02:33     There is currently a DDoS attack against a number of websites, most of them belong to US and South Korea goverment sites. The malware involved in the attack has been detected as Mydoom.HN. This is the list of URLs that is targeting: www.president.go.kr

Read More...

Zero day in MSVIDCTL.DLL

Posted by Luis Corrons at  08 July 09 09:21     A couple of days ago we started spotting a new vulnerability affecting Microsoft Video ActiveX Control. Even though it's been said there are thousands of web sites affected, they are only a few dozens and most of them are in China: Anyway, it is a

Read More...

Category: Vulnerabilities & Exploits, Malware, Video

Panda Challenge - "All that glitters is not gold"

Posted by Luis Corrons at  07 July 09 08:29     Arrizen has been the creator of this challenge. I've got the full explanation, and even though he says it’s really easy, I'm not that sure :-) This is everything Arrizen wants you to know before starting: “All that glitters is not

Read More...

Quarterly Report April-June 2009

Posted by Luis Corrons at  06 July 09 10:51     We've just published our latest quarterly report. Apart from the different figures for the Q2 you'll find some interesting articles about topics like: - Waledac - BlackHat SEO - Twitter Trends - Malware seeding via spam It is a good reading meanwhile

Read More...

Category: Security Reports

New Storm Worm: Waledacs

Posted by Asier Martínez at  06 July 09 09:53     After several months of calm, a new Waledac campaign has just started. This time a significant date has been used as social engineering: the Independence Day celebrated on 4th of July. Nearly 30 domains are being used to spread this malware using the

Read More...

Category: Malware

Panda Challenge

Posted by Luis Corrons at  02 July 09 08:02     It's summer time, daylights are longer and we have some extra spare time to enjoy doing some reversing, don't you think? Some weeks ago we launched in Spain a reverse challenge, and even though we had more than 800 answers, no one was able to

Read More...