Update Protection against Recent Malware Threats (2-Nov-09)

The update includes new protections against 10 recent malware threats: Botnet: Backdoor.Win32.Httpbot.yiTrojan: Packed.Win32.Krap.wTrickler: Trojan.Win32.Agent2.kxuTrickler: Trojan-Downloader.Win32.Pher.ijTrickler: Trojan-Downloader.Win32.SillyFDC-DSWorm: W32.FnumbotWorm:...

The Evolution of Rogue Anti-Virus

We often write about the fact that cybercriminals constantly change their tactics to take account of developments in the security and software industries. And I just came across a great example of this: it shows how the people behind rogue antivirus solutions adapt their “products” to exploit...

Report: Phishing and Scareware on The Rise

According to a report by the Anti-Phishing Working Group APWG, the number of phishing incidents and rogue anti-malware programs also known as scareware are rising at an “unprecedented rate”. The APWG says that around four fifths of the phishing attack websites claim to offer payment and financial...

Update Protection against Recent Malware Threats (4-Oct-09)

The update includes new protections against 20 recent malware threats:Backdoor: Trojan.Win32.StartPageRogue-Software: 007 Anti-SpywareRogue-Software: Fast Antivirus 2009Rogue-Software: PC AntiSpyware 2010Rogue-Software: Personal AntivirusRogue-Software: Rogue-Software.AVCareRogue-Software: Smart...

Phishing Sites, Rogue AV Skyrocket in 2009

From SearchSecurity.com Robert Westervelt Phishing websites and rogue antivirus programs increased precipitously in the first half of 2009, according to a new report issued by the Antiphishing Working Group. The number of unique phishing websites reached a high of nearly 50,000 in June, the secon...

iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

Microsoft Takes Aim at Malvertising Threat

Less than a week after a malicious advertising attack against the New York Times ad servers, Microsoft filed five civil lawsuits against companies allegedly using online advertising to serve malware. The lawsuits allege that individuals using the business names “Soft Solutions,” “Direct Ad,”...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

Rogue Advertisement Pushes Scareware to NYTimes.com Readers

For about 24 hours over the weekend, The New York Times site was serving up fake security software scareware. In a message posted to Twitter and a note on its NYTimes.com site, the newspaper blamed a rogue advertisement for the malware blast: Some nasty ads have hit the Web browsers of visitors t...

Update Protection against Recent Malware Threats (27-Aug-09)

The update includes new protections against 15 recent malware threats:Virus: W32.Sality.AMTrojan: Worm.Win32.Koobface.hyTrojan: TrojanSpy.Win32.Zbot.gen.CTrojan: Trojan.Win32.FraudPack.ogkTrojan: Trojan.Spy.Zbot.SOTrojan: Trojan.Spy.ZBot.RDTrojan: Trojan.LooksLike.ZaplotTrojan:...

Update Protection against Recent Malware Threats (19-Aug-09)

The update includes new protections against 12 recent malware threats:Backdoor Trojan: Backdoor.Win32.Prorat.KBackdoor Trojan: Backdoor.Win32.SpyAgent.BRogue-Software: XP-ShieldTrickler: Trojan-Downloader.Win32.Delf.tbvTrickler: Trojan.Downloader.Win32.Agent.bkwxTrojan: PWS-QQGameTrojan:...

openSUSE Security Update : kvm (kvm-412)

Rogue VNC clients could make the built in VNC server of kvm run into an infinite loop CVE-2008-2382 An off-by-one bug limited the length of VNC passwords to seven instead of eight CVE-2008-5714 Virtualized guests could potentially execute code on the host by triggering a buffer overflow in the...

Preemptive Protection against DHCP Stack Overflow in 'dhclient' script_write_params()

The ISC DHCP client code dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code. ISC DHCP is a reference implementation of the DHCP protocol, including a DHCP server, client, and relay agent. dhclient fails to check the...

GLSA-200907-12 : ISC DHCP: dhcpclient Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-12 ISC DHCP: dhcpclient Remote execution of arbitrary code The Mandriva Linux Engineering Team has reported a stack-based buffer overflow in the subnet-mask handling of dhclient. Impact : A remote attacker might set up a...

Update Protections against Recent Malware Threats (20-May-09)

The update includes new protections against 8 recent malware threats:Rogue-Software: ThreatNuker - ThreatNuker is a rogue security software that performs fake scans on the system and reports false and exaggerated infections. It attempts to trick the users into purchasing the license of the softwa...

Microsoft: Rogue security software fastest-growing online threat

Trojan downloaders and malware that masquerades as security software are the two fastest growing threats on the Web right now, according an analysis by Microsoft’s Malware Protection Center. In its latest Software Intelligence Report, released on Wednesday, the MMPC found that a Trojan downloader...

Spywaredb3.2squared.com SQL Injection

Dear Full-Disclosure, Since F-Secure, Kaspersky, Symantec, SecurityFocus and Secunia apparently don't care about fake anti-virus authors, I'm giving you this awesome, yet simple flaw that will give you access to their main control panel. ======== !background ======== I originally found this while...

Criminals surfing the Conficker hype

By Georg Wicherski As already reported by F-Secure, criminals are using the Conficker hype to push rogue anti-virus software to computer users. Their solution will sometimes display false alerts on clean systems and try to lure their victims into buying a fake cleaning program for $39.95 from the...

Update Protections against Recent Malware Threats (30-Mar-09)

The update includes new protections against 2 recent malware threats:Backdoor Trojan: Zlob - Zlob is backdoor Trojan that can be installed via malware downloader or exploits. It installs other applications that continuously connect to remote servers and downloads malicious scripts and...

Be careful what you search for

While search engine optimization SEO is becoming one of the must do’s for companies that are trying to improve theirsite ranking in search engines like Google and Yahoo, it’s also increasingly becoming a trick of the trade for spammers and malware authors looking to drive traffic to their own...