Hackers Using XSS to Insert iFrames in New Attack

In a new twist on a couple of old attack techniques, hackers have begun using cross-site scripting to inject malicious iFrames onto some Web sites, redirecting users to malicious sites designed to install unwanted software. The new attack, which leads to the installation of a rogue antivirus...

Trango Broadband Wireless Rogue SU Authentication Bug

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

Trango Broadband Wireless Interception

-------------------------------------------------------------------------- Trango Broadband Wireless M5830 Series Rogue SU Authentication Bug Date : 15 December, 2009 By: Blair - [email protected] -------------------------------------------------------------------------- Background ----------...

Rogue Antivirus Scams Making Moola

The FBI Internet Crime Complaint Center said rogue antivirus writers have raked in $150 million from users. Read the full article. Computerworld...

GLSA-200912-01 : OpenSSL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200912-01 OpenSSL: Multiple vulnerabilities Multiple vulnerabilities have been reported in OpenSSL: Marsh Ray of PhoneFactor and Martin Rex of SAP independently reported that the TLS protocol does not properly handle session...

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description Multiple vulnerabilities have been reported in OpenSSL: Marsh Ray of PhoneFactor and Martin Rex of SAP...

RIM Security Warns of Wireless DDoS Attacks

Hackers could one day turn ordinary smart phones into “rogue” devices to attack major wireless networks, Research In Motion’s security chief warned. Scott Totzke, RIM’s vice-president of BlackBerry security, said hackers could use smart phones to target wireless carriers using a technique similar...

Update Protection against Recent Malware Threats (2-Nov-09)

The update includes new protections against 10 recent malware threats: Botnet: Backdoor.Win32.Httpbot.yiTrojan: Packed.Win32.Krap.wTrickler: Trojan.Win32.Agent2.kxuTrickler: Trojan-Downloader.Win32.Pher.ijTrickler: Trojan-Downloader.Win32.SillyFDC-DSWorm: W32.FnumbotWorm:...

The Evolution of Rogue Anti-Virus

We often write about the fact that cybercriminals constantly change their tactics to take account of developments in the security and software industries. And I just came across a great example of this: it shows how the people behind rogue antivirus solutions adapt their “products” to exploit...

Report: Phishing and Scareware on The Rise

According to a report by the Anti-Phishing Working Group APWG, the number of phishing incidents and rogue anti-malware programs also known as scareware are rising at an “unprecedented rate”. The APWG says that around four fifths of the phishing attack websites claim to offer payment and financial...

Update Protection against Recent Malware Threats (4-Oct-09)

The update includes new protections against 20 recent malware threats:Backdoor: Trojan.Win32.StartPageRogue-Software: 007 Anti-SpywareRogue-Software: Fast Antivirus 2009Rogue-Software: PC AntiSpyware 2010Rogue-Software: Personal AntivirusRogue-Software: Rogue-Software.AVCareRogue-Software: Smart...

Phishing Sites, Rogue AV Skyrocket in 2009

From SearchSecurity.com Robert Westervelt Phishing websites and rogue antivirus programs increased precipitously in the first half of 2009, according to a new report issued by the Antiphishing Working Group. The number of unique phishing websites reached a high of nearly 50,000 in June, the secon...

iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

Microsoft Takes Aim at Malvertising Threat

Less than a week after a malicious advertising attack against the New York Times ad servers, Microsoft filed five civil lawsuits against companies allegedly using online advertising to serve malware. The lawsuits allege that individuals using the business names “Soft Solutions,” “Direct Ad,”...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

Rogue Advertisement Pushes Scareware to NYTimes.com Readers

For about 24 hours over the weekend, The New York Times site was serving up fake security software scareware. In a message posted to Twitter and a note on its NYTimes.com site, the newspaper blamed a rogue advertisement for the malware blast: Some nasty ads have hit the Web browsers of visitors t...

Update Protection against Recent Malware Threats (27-Aug-09)

The update includes new protections against 15 recent malware threats:Virus: W32.Sality.AMTrojan: Worm.Win32.Koobface.hyTrojan: TrojanSpy.Win32.Zbot.gen.CTrojan: Trojan.Win32.FraudPack.ogkTrojan: Trojan.Spy.Zbot.SOTrojan: Trojan.Spy.ZBot.RDTrojan: Trojan.LooksLike.ZaplotTrojan:...

Update Protection against Recent Malware Threats (19-Aug-09)

The update includes new protections against 12 recent malware threats:Backdoor Trojan: Backdoor.Win32.Prorat.KBackdoor Trojan: Backdoor.Win32.SpyAgent.BRogue-Software: XP-ShieldTrickler: Trojan-Downloader.Win32.Delf.tbvTrickler: Trojan.Downloader.Win32.Agent.bkwxTrojan: PWS-QQGameTrojan:...

openSUSE Security Update : kvm (kvm-412)

Rogue VNC clients could make the built in VNC server of kvm run into an infinite loop CVE-2008-2382 An off-by-one bug limited the length of VNC passwords to seven instead of eight CVE-2008-5714 Virtualized guests could potentially execute code on the host by triggering a buffer overflow in the...

Preemptive Protection against DHCP Stack Overflow in 'dhclient' script_write_params()

The ISC DHCP client code dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code. ISC DHCP is a reference implementation of the DHCP protocol, including a DHCP server, client, and relay agent. dhclient fails to check the...