Mail.ru: Activities are not Protected and able to crash app using other app (Can Malware or third parry app).

Name : ru.mail.mailapp-10570.apk Size : 11.02MB MD5 : 7600e180a1616c7ebb1b1514e23b7d19 Package: ru.mail.mailapp ru.mail.registration.RegistrationActivity ru.mail.ui.writemail.FeedbackActivity ru.mail.ui.writemail.ForwardActivity ru.mail.ui.writemail.ReplyActivity ru.mail.ui.writemail.DraftActivit...

Netflix Releases FIDO Incident Response Tool

Engineers at Netflix have released another one of the company’s bespoke security tools as an open-source application, this time an incident-response system known as FIDO. The tool is designed to help automate the process of incident response, and specifically it acts as a new layer that helps tie...

Malware Communication Analyzer: Malcom

Malcom is a tool designed to analyze a system’s network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you...

Possible Backdoor

Look for potential backdoors. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105238";...

Sysmon v2.0 - System Activity Monitor for Windows

System Monitor Sysmon is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to...

Log and Event Manager now with File Integrity Monitoring

Security pros everywhere rely on SolarWinds Log & Event Manager for powerful, affordable, and efficient Security Information and Event Management SIEM. Our All-In-One SIEM combines log management, event correlation, visualization, reporting, File Integrity Monitoring, USB defense, SQL database...

Malware Detection Must Soon Recognize Evasive Behaviors

Criminals and advanced attackers have long fortified malware with features that help malicious code stay hidden from analysis. We’ve seen malware samples that determine if they’re being executed in a sandbox or virtual machine, or over remote desktop protocol connections, and stay quiet until...

SUSE-SU-2015:0298-1 Recommended update for clamav

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements: Support for common raw disk image formats using 512 byte sectors, specifically GPT, APM, and MBR partitioning. All ClamAV sockets clamd, freshclam, clamav-milter, clamdscan,...

SUSE-SU-2015:0871-1 Recommended update for clamav

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements: Support for common raw disk image formats using 512 byte sectors, specifically GPT, APM, and MBR partitioning. All ClamAV sockets clamd, freshclam, clamav-milter, clamdscan,...

Threat Outbreak Alert: Fake Bank Payment Notification Email Messages on May 6, 2014

Medium Alert ID: 34133 First Published: 2014 May 6 16:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment notification for the recipient. The email message attempts to convince the recipient to open the...

New Zeus Variant Comes Complete With a Signed Certificate

Yet another variant of the Zeus banking Trojan has surfaced; this one comes disguised as an Internet Explorer document and uses an authentic digital certificate to download a rootkit onto infected machines. According to researchers at the SSL firm Comodo, more than 200 examples of the Trojan have...

Threat Outbreak Alert: Fake Payment Transfer Notice Email Messages on March 31, 2014

Medium Alert ID: 33578 First Published: 2014 March 31 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer cancellation notice for the recipient. The text in the email message attempts to convince the...

CrowdInspect - Scan of your running processes on Windows with Virus Total, WOT & MHR

CrowdInspect is a free professional grade tool for Microsoft Windows systems from CrowdStrike aimed to help alert you to the presence of malware that communicates over the network that may exist on your computer. It is a host-based real-time monitoring and recording tool utilizing multiple source...

Threat Outbreak Alert: Fake Purchase Order Invoice Email Messages on March 16, 2014

Medium Alert ID: 33362 First Published: 2014 March 17 14:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order invoice notification for the recipient. The text in the email message attempts to convince the...

Multiple Antivirus Products TAR file parser Security Bypass - Ver2 (CVE-2012-1459)

A security bypass vulnerability has been reported in multiple antivirus products. A remote attacker could Successful exploitation of this vulnerability by using a specailly crafted TAR archive with a Tar archive entry with a length field corresponding to that entire entry, plus part of the header...

[Killtrojan Syslog] Tool to detect malware activity on a system

Killtrojan Syslog is a free application to create a report about characteristics of the system to further analyze and look for signs of malware, also is intended to put the report in a specialized forum for users to help. The tool has a very intuitive and easy to use for non-technical users to...

LusyPOS Malware Detection

Binary data lusyposdetect.nbin...

Network Security Monitor Framework: Bro

Bro is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including...

Google Chrome to Automatically Block Malicious Downloads

Google is planning to add a new feature to its Chrome browser that will block malicious downloads automatically, helping to prevent drive-by downloads and the kind of malware that rides along with supposedly legitimate software. The new addition to Chrome already is in the development queue,...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on October 9, 2013

Medium Alert ID: 31193 First Published: 2013 October 10 19:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince the recipient to...