South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

South Korea Cyber Attack, Wiper malware and Chinese IP Address

Yesterday we reported about a massive Cyber attack on South Korea that was responsible for shutting down networks of South Korean banks and TV broadcasters. Police are still investigating the cyber attack but the country's Communications Commission has revealed that the hacking originated from a...

Group behind largest Ransomware campaign arrested by Spanish police

Police in Spain have arrested a gang of 11 cyber criminals who used ransomware to demand money from thousands of victims in 30 countries using malware known as Reveton. Police arrested six Russians, two Ukrainians and two Georgians in the Costa del Sol. The gang leader, a 27-year-old Russian, was...

Group behind largest Ransomware campaign arrested by Spanish police

Police in Spain have arrested a gang of 11 cyber criminals who used ransomware to demand money from thousands of victims in 30 countries using malware known as Reveton. Police arrested six Russians, two Ukrainians and two Georgians in the Costa del Sol. The gang leader, a 27-year-old Russian, was...

FAKEM RAT Mimics Normal Network Traffic

A family of remote access Trojans RATs known as FAKEM has been evading detection for more than three years by camouflaging themselves as legitimate network traffic. Nate Villeneuve, a senior threat researcher at Trend Micro, said that remote access Trojans are a favorite among attackers seeking t...

Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)

A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...

Spear Phishing Remains Preferred Point of Entry in Targeted, Persistent Attacks

Persistent targeted attacks against the government, financial services, manufacturing and critical infrastructure take on many characteristics. Attackers can have different backgrounds and motivations, and the tools they use can range from commodity malware to zero-day exploits. One characteristi...

Fake Windows 8 Key Generators Found Tricking Users

Attackers continue to exploit the buzz behind the launch of Windows 8, Microsoft’s latest operating system. The latest attack attempts to trick users into using fake key generators that claim they’ll install the software to computers free of charge. Key generators, or keygens, are programs that...

Phony Browser Updates Redirect Victims to Malware Sites, Scareware

Hackers are using malicious ads promising browser updates to drop malware on users’ machines. Using a mix of social engineering and a variation on scareware, attackers have been taking advantage of recent legitimate Firefox and Chrome updates to infect hundreds of machines in Europe and the Unite...

TripAdvisor travel website infected with Gamarue malware, infect 2% Indian Internet Users

TripAdvisor Inc., a hotel-review website, recently became a victim of the bug, said Trend Micro Inc., an Internet security solutions provider. Many of TripAdvisor's users received spam mail with booking confirmations for hotels they had checked out on the website, 1.89% of Indian Internet Users...

Trend Micro tmactmon.sys DOS vulnerability analysis(0day)-vulnerability warning-the black bar safety net

When tmactmon. sys received ioctlcode=0x9100444f the IRP, it will call the Dispatch function for processing, as shown below. . text:0 0 0 1 1 1 1 6 ; int stdcall BugDispatchint, PIRP Irp . text:0 0 0 1 1 1 1 6 BugDispatch proc near ; DATA XREF: sub11C4C+16D o . text:0 0 0 1 1 1 1 6 . text:0 0 0 1...

Trend Micro Control Manager ad hoc query Module SQL Injection (CVE-2012-2998)

An SQL injection vulnerability has been reported in Trend Micro Control Manager...

PixSteal-A Trojan Steals Images, Uploads to Iraqi FTP Server

A new Trojan has been identified that has the capability of stealing images from infected computers, setting the stage for anything from identity theft to blackmail. PixSteal-A also pilfers .dmp, or Windows memory dump files that contain data on system crashes and sends all stolen data to a remot...

Russian Underground Cybercrime market offering sophisticated services

Security firm Trend Micro recent analyses the Russian crimeware markets and has found that malware tools and services range from one-time packages which cost just pennies to sophisticated packages and services which cost purchasers thousands of dollars per month. If you want to buy a botnet it wi...

Beware of Fake-Antivirus "Win 8 Security System"

Late in August McAfee Labs discovered a Fake Antivirus program that claims to detect infections, and displays alerts to scare users into purchasing protection. On the contrary, this program is not genuine software and has nothing to do with reliable and effective AV tools. The truth is that this ...

Trend Micro Control Manager AdHocQuery_Processor.aspx id Parameter SQL Injection

Trend Micro Control Manager, a centralized threat and data protection management application, is installed on the remote Windows host and is potentially affected by a SQL injection vulnerability because the application fails to properly sanitize user-supplied input to the 'id' parameter of the...

Dorkbot Now Worming Its Way through Skype

The Dorkbot worm that fooled many a Facebook and Twitter user is now socially engineering Skype users into downloading the malware, whose payload now includes a mechanism to lock down machines. Various antivirus and security companies are reporting the latest iteration rummages through an infecte...

Ransomware malware targeting Skype users

Security firm Trend Micro discovered a new worm targeting Skype users with spam messages designed to infect machines with the Dorkbot ransomware has been discovered. A malicious worm is taking advantage of the Skype API to spam out messages that link to a ZIP files ie. skype06102012image.zip or...

CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager TMCM before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...