Archives for 

Malware

EC-Council, Security Certification Group website hacked and defaced

“Although EC-Council has been respected by corporations and governments, many in the in the security community don’t agree the way they certify and considered it as useless certification ”  Analysts predict that Passports of more than 60,000 US military and government IT professionals at risk Hacker went by the name of Eugene Belford, claims to […]
Share Button
Continue reading →

Youtube serving Malwar- Caphaw Banking Trojan

Monetizing by  serving ads has been the business model lately by most know sites like facebook, twitter, google, msn.com and various other websites. However there is a dark ecosystem in which these ads are either hijacked or compromise user accounts to server malware.  A similar issue was seen by  Bromium Labs  and has been reported […]
Share Button
Continue reading →

Mass Exploitation of Linksys routers – E1000 & E1200 by “TheMoon”

Johannes B, a security researcher from the SANS has posted a warning for useres about  a self-replicating malware named “The Moon”has been exploiting authentication bypass and code-execution vulnerabilities on Linksys routers – E1000 & E1200 wireless routers. How does it work ? The malware remotely calls Home Network Administration Protocol (HNAP), allows identification, configuration and management of networking devices.  Malware […]
Share Button
Continue reading →

Careto/Mask APT cyber-espionage operations running and undetected for 7 long years

Its almost sounded unbelievable when Kaspersky research published a cyber espionage APT campaign MASK (Careto) that’s been running in the wild since 2007, undetected, targeting 31 countries.   The complexity of the tools used for MAST by the attackers are very sophisticated which makes its very special. This includes an extremely sophisticated piece of malware, a […]
Share Button
Continue reading →

Brazilian Encrypted Java Archive trojan banker spreads via Playstation phishing email – Kaspersky

Researchers from Kaspersky discovered a Brazilian Java Trojan that spreads via phishing email. Dmitry Bestuzhev explains that he never owned a Playstation but received an email with an attachment with a unusual ways of spreading Trojan bankers via .Jar files ( 14KB). It appeared to be a strange Trojan because even if  a user just clicks on a .jar […]
Share Button
Continue reading →

Largest Website in Sweden Aftonbladet serves Malicious Code for Internet Explorer users

Its very common lately for sites spreading malware from ads. The ad which are served from Google and Microsoft may relie on third party syndication may potentially be compromised which may lead to malware distribution.  A similar incident happened as reported by Kaspersky that the largest website of sweden was spreading scare-ware to its users. […]
Share Button
Continue reading →

Adobe released Emergency Flash Player update for critical zero day threat – CVE-2014-0497

Adobe released an emergency patch for a critical vulnerability affecting Flash Player for Windows, Linux and OS X, the exploitation of which can result in an attacker gaining remote control of the compromised systems. The security flaw exists in Adobe Flash Player 12.0.0.43 and earlier versions  Adobe thanks Alexander Polyakov and Anton Ivanov of Kaspersky Labs […]
Share Button
Continue reading →

PNG Image Metadata leads to New iFrame Injections

Peter Gramantik, a malware researchers from Sucuri has discovered a new way to distribute malware that relies on reading  JavaScript code stored in an obfuscated PNG file’s metadata to trigger iFrame injections. This injection makes it very harder for antivirus detection because the injection  method is  deeply engrained in the image’s metadata. This iframe can be seen […]
Share Button
Continue reading →

GameOver Latest Zeus variant uses Encryption to bypass Detection – Gary

  GameOver Zeus is a notorious malware family that makes fraudulent transactions from your bank accounts from the infected host. A new variant of GameOver Zeus uses encryption to hide itself while propagation which makes it almost impossible to be detected by modern day antivirus. The malware encrypts itself so well that it can pass the […]
Share Button
Continue reading →

Sophos Dirty Dozen Spampionship 2013 results are out, USA tops the charts!

Sophos, the antivirus and encryption products company recently released the ‘Dirty Dozen’ Spampionship tables for the Q4 of 2013. According to Sophos, United states has topped the charts with a 14.5% spam relaying volume. Although it is no matter to celebrate, these results are not completely surprising given that United States is one of the […]
Share Button
Continue reading →