Tumblr Repairs Defacements After Worm Hits Thousands of Accounts

A malware attack against the Tumblr blogging platform has been stifled, but not before tens of thousands of pages were defaced with a racist taunt by a group of Internet trolls known as GNAA. A post on the Tumblr staff blog yesterday said engineers had identified the source of the problem, remove...

Tumblr Worm affects thousands blogs, spam offensive articles

A notorious group of Internet trolls says it has unleashed a worm that has littered Tumblr blogs with inflammatory and racist posts. A massive bug affecting some 8,600 unique Tumblr users. Gay Nigger Association of America, took responsibility for the attack. The infected post begins: "Dearest...

Worm Tries AutoRun, Then Social Engineering to Infect

Sophos and TrendMicro, and anumber of other security firms, are reporting a dramatic increase in the prevalence of a worm using AutoRun and social engineering to proliferate. If you thought Microsoft solved the AutoRun problem, you aren’t alone. They tried to shut it down after it was famously an...

typo3 -- Multiple vulnerabilities in TYPO3 Core

Typo Security Team reports: TYPO3 Backend History Module - Due to missing encoding of user input, the history module is susceptible to SQL Injection and Cross-Site Scripting. A valid backend login is required to exploit this vulnerability. Credits go to Thomas Worm who discovered and reported the...

HackerProof : Your Guide To PC Security

With over 140,000 known computer viruses and 85,000,000 spam emails sent out each day, the likelihood of your PC coming into contact with malware such as viruses, worms, and spyware is almost guaranteed. It is very important to secure your computer just like you would secure your house or car. Yo...

Dorkbot Now Worming Its Way through Skype

The Dorkbot worm that fooled many a Facebook and Twitter user is now socially engineering Skype users into downloading the malware, whose payload now includes a mechanism to lock down machines. Various antivirus and security companies are reporting the latest iteration rummages through an infecte...

Ransomware malware targeting Skype users

Security firm Trend Micro discovered a new worm targeting Skype users with spam messages designed to infect machines with the Dorkbot ransomware has been discovered. A malicious worm is taking advantage of the Skype API to spam out messages that link to a ZIP files ie. skype06102012image.zip or...

Grand push her stored-XSS-vulnerability warning-the black bar safety net

Vulnerability type: xsscross-site scripting attacks Hazard rating: high The self-assessment Rank: 1 to 5 Vulnerability status: the vendor has confirmed Brief description: Grand tuita somewhere in the function leads to the www. tuita. com domain name under the storage typeXSS, combined with the...

New Ransom malware infecting computers

The Metropolitan Police have issued an urgent warning about a new ransom malware that is in circulation. Ransomware also referred to in some cases as cryptoviruses, cryptotrojans or cryptoworms comprises a class of malware which restricts access to the computer system that it infects, and demands...

Microsoft Patches Critical MS12-060 Office Flaw Being Used in Targeted Attacks

Microsoft on Tuesday fixed a critical vulnerability in a component of Office, SQL Server and other widely deployed applications that attackers already are using in targeted attacks. The flaw in the Microsoft Common Controls component, which was one of the 26 vulnerabilities fixed in nine bulletin...

New Morto Strain Emerges With File Infection Capability

A new strain of the Morto worm has added a file infection capability in addition to its existing ability to compromise remote desktop connections, according to new research from Microsoft. Now Morto is infecting files in the default RDP file share, ‘tsclient,’ after it determines which drives it...

AutoCAD Worm Stealing Designs, Blueprints

Security researchers have come across a new worm that is meant specifically to steal blueprints, design documents and other files created with the AutoCAD software. The worm, known as ACAD/Medre.A, is spreading through infected AutoCAD templates and is sending tens of thousands of stolen document...

News Roundup: What The Experts Are Saying About The Flame Worm

UPDATE: Are the winds of cyber war blowing, or is the newly discovered Flame worm just a tempest in a teapot? Just days after it was disclosed to the public, the Flame worm is fanning the flames of controversy within the security world. Threatpost takes a look at what people are saying. Calling...

Flame Worm Detection

Binary data 6492.prm...

Iran: We Have Discovered 'Hidden Agenda' Of Oil Ministry Attack

The Iranian government has discovered what it describes as a ‘hidden agenda’ behind a recent malware attack on the country’s Oil Ministry, according to a report published by the FARS News Agency. The statement, from Deputy Oil Minister Hamdollah Mohammadnejad, confirmed earlier reports that the...

SevenDust/666, AutoStart 9805

1998 The late 1990s saw the advent of more malicious malware for the Mac. Discovered a few days before Halloween 1998, the Sevendust virus would remove all files from the infected hard drive, but leave applications and one file named “666” in the Extensions folder. AutoStart, one of the first Mac...

Kelihos Returns: Same Botnet or New Version?

The twice-shut-down Kelihos botnet remains active and continues spamming with a new variant, despite yesterday’s efforts by Kaspersky Lab and CrowdStrike that knocked offline and sinkholed the most recent version of the botnet. According to a Seculert report, the indomitable botnet is using a...

Mass WordPress Compromise Fuels CRIDEX Worm Outbreak

There are a number of compromised sites on the popular blogging platform, WordPress, which, according to a Trend Labs report, are actively infecting users with the CRIDEX worm. The infections are part of a social engineering campaign that lures users with emails purporting to come from trusted...

[POC] Windows RDP Vulnerability Exploit

POC Windows RDP Vulnerability Exploit The vulnerability described by Microsoft as critical is known as MS12-020 or the RDP flaw. The hackers worked quickly on this particular vulnerability and we've already seen attempts to exploit the flaw which exists in a part of Windows called the Remote...

Microsoft Denies Reports of Exploits For Critical Windows RDP Hole

Microsoft said that it has not seen any evidence that hackers have figured out a way to take advantage of a critical vulnerability in the Windows Remote Desktop Protocol RDP that the company disclosed and patched on Tuesday. The statement comes in the wake of unconfirmed reports of working exploi...