1722 matches found
Mobile Android banking Trojan Svpeng Adds Phishing Know-How
An Android banking Trojan known as Svpeng has added phishing capabilities to its arsenal, and researchers have spotted it attacking Russian banking clients in what is perceived to be a dry run before it is adapted for other countries. “Typically, however, cybercriminals first test-run a technolog...
Threat Outbreak Alert: Fake Mobile Phone Service Email Messages on October 22, 2013
Medium Alert ID: 31430 First Published: 2013 October 23 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to Russian-language spam email messages that claim to contain mobile phone service information for the recipient. The text in the email message attempts to...
Unauthorized Access Backdoor found in D-Link router Firmware Code
A number of D-Link routers reportedly have an issue that makes them susceptible to unauthorized backdoor access. The researcher Craig, specialized on the embedded device hacking - demonstrated the presence of a backdoor within some DLink routers that allows an attacker to access the administratio...
UniCredit Bank CSRF / XSS / Shell Upload Vulnerabilities
UniCredit Bank suffers from cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. They have not responded to the authors notifications. ============================================================================================== UNICREDITBANK Cross Site...
UniCredit Bank Cross Site Request Forgery / Cross Site Scripting / Shell Upload
============================================================================================== UNICREDITBANK Cross Site Scripting & Dom Based / File Upload / form without CSRF protection = ============================================================================================== TIME-LINE...
Russian Hacker put up an Android Firefox Zero-Day Exploit for Sale
A Russian Exploit writer and underground Hacker who goes by the handle "fil9" put up an Android Firefox Zero-Day Exploit for Sale in an open Exploit Market. Author claims a Zero Day vulnerability in Firefox for Android, which works on Firefox versions 23/24/26 Nightly. The advertisement was spott...
Russian Hacker put up an Android Firefox Zero-Day Exploit for Sale
A Russian Exploit writer and underground Hacker who goes by the handle "fil9" put up an Android Firefox Zero-Day Exploit for Sale in an open Exploit Market. Author claims a Zero Day vulnerability in Firefox for Android, which works on Firefox versions 23/24/26 Nightly. The advertisement was spott...
Email Spam Claims US Attacks Syria and Leads to Malware
A new phishing campaign is disseminating malicious links with emails purporting to come from CNN saying that the United States has initiated military strikes against the embattled regime of Syrian President Bashar al Assad. One such email, obtained by Kaspersky Lab and posted on Securelist, comes...
Tor Anonymizing network overload caused by Mevade Botnet
Recently, Tor Project Director - Roger Dingledine described a sudden increase in Tor users on the Tor Network after the events related to disclosure of the PRISM surveillance program, Since August 19, 2013, there has been an impressive growth in the number of Tor users. At first, No one knew who ...
Tor Anonymizing network overload caused by Mevade Botnet
Recently, Tor Project Director - Roger Dingledine described a sudden increase in Tor users on the Tor Network after the events related to disclosure of the PRISM surveillance program, Since August 19, 2013, there has been an impressive growth in the number of Tor users. At first, No one knew who ...
New Botnet Campaign 'Fort Disco' Brute-Forcing Thousands of WordPress, Joomla Websites
Password theft has been a growing problem within the security community. Researchers at Arbor Networks have uncovered a botnet called Fort Disco that was used to compromise more than 6000 websites based on popular CMSs such as WordPress, Joomla and Datalife Engine. The Fort Disco botnet is...
New Botnet Campaign 'Fort Disco' Brute-Forcing Thousands of WordPress, Joomla Websites
Password theft has been a growing problem within the security community. Researchers at Arbor Networks have uncovered a botnet called Fort Disco that was used to compromise more than 6000 websites based on popular CMSs such as WordPress, Joomla and Datalife Engine. The Fort Disco botnet is...
Russian Cyber Criminals selling hacked websites access in Underground stores
Underground sites more commonly offer access to networks of compromised machines or stolen credit card information. Webroot has uncovered a criminal underground store dedicated to selling access to more than tens of thousands of hacked legitimate websites. Their customers can buy an administrator...
Russian Cyber Criminals selling hacked websites access in Underground stores
Underground sites more commonly offer access to networks of compromised machines or stolen credit card information. Webroot has uncovered a criminal underground store dedicated to selling access to more than tens of thousands of hacked legitimate websites. Their customers can buy an administrator...
KINS Banking Trojan For Sale in Underground Forum
It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...
Russian hacker illegally ported Xbox LIVE Arcade Game to PC
A Russian hacker who goes by the handle "Barabus" on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: "This is not piracy, this is restoration of justice. Th...
Warning ! Facebook virus Zeus targets bank accounts
The infamous Zeus malware has once again resurfaced as per Symantec and is capable of draining your bank accounts. Zeus propagates through phishing messages that originate from an account that has been phished. Such a phished account will then start automatically sending messages to friends with...
Russian hacker illegally ported Xbox LIVE Arcade Game to PC
A Russian hacker who goes by the handle “Barabus” on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: “This is not piracy, this is restoration of justice. Th...
Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication
Early 2012 ESET company a mysterious malware, dubbed the Avatar rootkit Win32/Rootkit.Avatar, advertised in the underground forums by Russian cyber crime. "We present you here previously announced product. In connection with work on other projects, we moved the release date for the public from Ma...
Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication
Early 2012 ESET company a mysterious malware, dubbed the Avatar rootkit Win32/Rootkit.Avatar, advertised in the underground forums by Russian cyber crime. "We present you here previously announced product. In connection with work on other projects, we moved the release date for the public from Ma...