PandaLabs Predicts Major Cybersecurity Trends for 2011

PandaLabs, the antimalware laboratory of Panda Security, has predicted several major cybersecurity threats for 2011. These include hacktivism, cyber warfare, profit-driven malware, social engineering, and adaptive malicious codes. Additionally, there will be increased threats to Mac users, new...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Michael Calce Warns of Online Dangers at HDS Canada's Forum

The guest keynote speakers at technology conferences can vary in quality, but Hitachi Data Systems HDS Canada NYSE: HIT made a smart choice by inviting Michael Calce, also known as Mafiaboy, to speak at their recent Information Forum event in Toronto. Calce gained notoriety as a teenage hacker fr...

Adobe PDF - Escape EXE Social Engineering (No JavaScript) (Metasploit)

$Id: adobepdfembeddedexenojs.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe PDF - Embedded EXE Social Engineering (Metasploit)

$Id: adobepdfembeddedexe.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fake Amazon Receipt Generator Dupes Merchants

A new scam has been circulating the internet lately that aims to swindle Amazon sellers by generating fake receipts. Amazon Receipt Generator, an executable file, has been making the rounds on hacking forums for the last few months. The program allows scammers to input an array of fake informatio...

Social Engineering Ninja v0.4 - Latest Release Download

"S-E Ninja is a Social Engineering tool, with 20-25 popular sites fake pages and anonymous mailer via mail function in PHP. It is a Phishing Web Application Written in PHP,XHTML,CSS,JS." This is the official change log: Edited tables names Added XSS stealer module Now you got control of ipcapture...

Potential WikiLeaks Phishing Scams

In the past, US-CERT has received reports of phishing scams and malware campaigns related to topics that are of high-interest to the U.S. Government or news media, such as the WikiLeaks website. Users' systems have been compromised by receiving and accessing phishing emails with subject lines tha...

6) (Anti) social networking

Social networks like Facebook and Twitter are fabulous platforms for sharing information and news. Retailers of all stripes have tapped into this and are using them to get the word out – virally – about discounts, sales and in-store events. Unfortunately, mechanisms for vetting online reputation...

Holiday Season Phishing Scams and Malware Campaigns

As the winter holidays are quickly approaching, US-CERT is republishing this entry to increase awareness. In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the winter holiday and holiday shopping season. US-CERT reminds...

Social Engineering Ninja v0.3 - News release download

Now, the author has made an updated version available for us – Social Engineering Ninja version 0.3. "S-E Ninja is a Social Engineering tool, with 20-25 popular sites fake pages and anonymous mailer via mail function in PHP. It is a Phishing Web Application Written in PHP,XHTML,CSS,JS." This is t...

Social-Engineer Toolkit v1.0 - Latest Version Download

The Social Engineer Toolkit SET has been updated to version 1.0! We wrote about the Social Engineer's Toolkit in our old post here. This release is called the Devolution Release. "The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the hum...

Fraud Advisory for Businesses Released: Corporate Account Take Over

As part of a joint effort, the United States Secret Service, the Federal Bureau of Investigation, the Internet Crime Complaint Center IC3 and the Financial Services Information Sharing and Analysis Center FS-ISAC have released Fraud Advisory for Businesses: Corporate Account Take Over PDF. The...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

Researchers: Google Aurora Attackers Back in Business?

Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...

Malicious Email Campaign Circulating

US-CERT is aware of public reports of malware spreading via email. These reports indicate that the malicious email messages contain the subject line "Here you have" or "Just For You" and contain a link to a seemingly legitimate PDF file. If users click on this link, they will be redirected to a...

Former Employees a Rich Target in Social Engineering Contest

The results of a hacking contest at the DEFCON conference shows that the largest U.S. corporations have a lot to learn. “If any of these targets had hired us to do a social engineering audit, we would have failed them,” an organizer said. HED:DEFCON tournament suggests ex-employees pose big risk...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...

Adobe PDF Escape EXE Social Engineering (No JavaScript)

$Id: adobepdfembeddedexenojs.rb 10126 2010-08-24 18:20:16Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Location-Based Services Raise Privacy, Security Risks

The growing popularity of location-based services in the social networking world is a serious security and privacy risk that must be taken seriously. These services, which allow users to share their whereabouts with other people by disclosing their own location, is a very popular trend on social...