The Pros And Cons of Jailbreaking Your Phone

Does jailbreaking your mobile phone make it less secure? Kaspersky Lab Director of Global Research and Analysis Costin Raiu offers his thoughts in this exclusive video Q&A with Threatpost Editor Ryan Naraine. Jailbreaking your iPhone was, at one time, an activity limited to serious hardware hacke...

Botnet Crackdowns Staunch Spam…For a Month

The crackdowns on massive, spam-spewing botnets disrupted the global flow of spam e-mail…for about a month. That, according to a new report out from Kaspersky Lab. “Spam in the Third Quarter of 2010” is the latest, quarterly report from Kaspersky’s anti virus research labs. It finds that several...

Mozilla Confirms Critical Firefox Bug, Readies Fix

Mozilla is working on a patch for the recently disclosed critical bug in Firefox that has been exploited on at least one prominent Web site this week. The vulnerability in Firefox is being used by attackers in drive-by download attacks to install malware on victims’ machines. Mozilla’s security...

Code injection

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

CVE-2010-3888

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

CVE-2010-3888

CVE-2010-3888 concerns an unspecified local privilege escalation in 32-bit Windows, exploited in the wild by Stuxnet in July 2010. The initial description notes a privilege gain via unknown vectors and does not specify affected versions beyond 32-bit Windows; no concrete root cause, vulnerable co...

All Eyes On Stuxnet At Annual Virus Researcher Summit

The world will know more about the mysterious Stuxnet virus by week’s end, after top virus researchers reveal the findings of their post mortem on Stuxnet at the annual Virus Bulletin Conference. HED: All eyes on Stuxnet at annual virus researcher summit DEK: Researchers will reveal new details...

My Opera Found To Host Malware

HED: MyOpera found to host malware BAK: The My Opera free Web hosting service is hosting malicious code, just the latest prominent hosting service to be gamed by malware distributors. Less than a month after Google’s Code hosting service was found to be hosting and serving malicious executables, ...

Researchers Find Malware on My Opera Page

Researchers have discovered that a page on the My Opera community Web site is hosting malware related to an IRC botnet. The discovery comes just a couple of weeks after malicious code also was found on Google Code servers. On Thursday, a researcher perusing a page on the My Opera community site...

Microsoft Missed 2009 Published Article on Stuxnet-Type Attack

A security flaw affecting Microsoft’s Windows operating system that was exploited by the Stuxnet worm was publicly disclosed more than a year before the worm appeared, according to a researcher at Symantec Corp. On September 17, Symantec researcher Liam O Murchu noted on that company’s Connect bl...

Twitter Closes Web Hole After Attack Hits Up to 500,000

UPDATE: Engineers at social network Twitter.com plugged a vulnerability in the company’s main Web page after attacks that exploited the hole may have hit more than 500,000 users. The security hole was patched at about 9:45 AM ET, according to a post by Del Harvey @delbius, the head of Twitter’s...

Stuxnet Fallout: Microsoft Patches Critical Print Spooler Hole

Microsoft patched a zero day vulnerability in Windows Print Spooler that was used by Stuxnet and says that cross vendor cooperation may be the silver lining to the Stuxnet attack. Microsoft on Tuesday announced a software update to close a critical hole in a common service used by WIndows XP...

Location-Based Services Raise Privacy, Security Risks

The growing popularity of location-based services in the social networking world is a serious security and privacy risk that must be taken seriously. These services, which allow users to share their whereabouts with other people by disclosing their own location, is a very popular trend on social...

Inside the Black Energy 2 Botnet

By Dmitry Tarakanov Cybercriminals use a variety of bots to conduct DDoS attacks on Internet servers. One of the most popular tools is called Black Energy. To date, Kaspersky Lab has identified and implemented detection for over 4,000 modifications of this malicious program. In mid-2008 malware...

Rogue AV Live Tech Support

This is a recording of a live chat session with the technical support agent associated with a rogue AV program. The session was recorded by Nicolas Brulez, a security analyst at Kaspersky Lab.The video is best viewed in full-screen mode...

Jose Nazario on Politically Motivated DDoS Attacks (Part 3)

In the third part of his talk on politically motivated DDoS attacks at the recent Kaspersky Lab Security Analyst Summit, Jose Nazario of Arbor Networks discusses the tactics and motivations for these attacks...

Jose Nazario on Politically Motivated DDoS Attacks (Part 2)

In the second part of his discussion on DDoS attacks at the Kaspersky Lab Security Analyst Summit in Cyprus, Jose Nazario of Arbor Networks delves into some of the statistics he has compiled on these attacks...

Lab Matters: Inside Targeted Attacks

Kaspersky Lab anti-malware researchers Costin Raiu and Magnus Kalkuhl field questions on targeted attacks, how they work and how businesses can protect themselves...

Kurt Baumgartner on the Eleonore Exploit Kit (Part 1)

In this talk from the Kaspersky Lab Security Analyst Summit in Cyprus, independent security researcher Kurt Baumgartner discusses the inner workings of the infamous Eleonore exploit kit and the business model behind it...

Anatomy of the Eleonore Exploit Kit

LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...