Experts Say New Storm Variant of Poor Design

A new variant of the Storm worm has emerged, but it does not appear to be as well-designed as its older relative, according to computer security researchers. Read the full article. IDG News Service...

UK Health System Infected by Data Worm

The UK’s National Health Service has been hit by a voracious, data-stealing worm that’s easily detected by off-the-shelf security software, according to researchers who directly observed the mass compromise. Read the full article. The Register...

There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm!

There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm! Discuz! do not filter the Malicious code when user enter their personal signature, attacker can enter the xss code, Discuz! will save and run it! It maybe lead the...

Koobface Worm Doubles C&C Servers in 48 Hours

Yesterday’s shut down of Troyak-as was definitely good news for the whole IT security community. Seeing cybercriminals getting kicked out from the Internet and then trying to get back inside calls for popcorn and soda. But unfortunately, as some botnets struggle, others stay unaffected: Koobface,...

DDoS Worm Creator Heading to Prison

An Estonian virus writer has been jailed for two and a half years for creating a Windows worm family that launched denial of service attacks on the websites of a local insurance firm and ISP. Read the full article. The Register...

iPhone Worm Was Simple, Yet Effective, Analysis Shows

The iKee worm that was infecting jailbroken iPhones last month was a simple, yet effective, piece of software that shows how easy it might be for an attacker to create a fairly large, functioning botnet comprising mobile devices, an analysis of the worm shows. Researchers at SRI International’s...

Shadowserver Data Reveals Top Conficker Victims

ISPs in Russia and Ukraine are home to some of the highest concentrations of customers whose machines are infected with the Conficker worm, shows data from the Shadowserver Foundation. Read the full article. Washington Post...

Video Hides Koobface on Facebook Wall Posts

A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. The Last Watchdog...

Microsoft Patches Critical IE, Windows Vulnerabilities

Microsoft today shipped six bulletins with patches for a total of 12 documented security vulnerabilities in a wide range of widely deployed software products. Three of the six bulletins are rated “critical,” Microsoft’s highest severity rating. The most serious issues affect the company’s Interne...

2010: A Conficker Worm Odyssey

Researchers expect Conficker to get worse in the coming year in a number of specific ways including the corruption on defensive systems, keylogging, DDoS, mass identity theft, and more. Read the full article. Help Net Security...

Sasser Worm avserve FTP PORT Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sasser Worm...

Facebook XXX Worm Replaces Profiles

Security researchers have identified a new worm spreading across Facebook, luring people out to adult Web sites and automatically replicating itself across people’s profile pages. Read the full article. internetnews.com...

Sourcefire November Vulnerability Report

Sourcefire VRT researcher Alain Zidouemba talks about Microsoft Patch Tuesday, the SSL renegotiation flaw and the iPhone worm...

Google Reader Used in Koobface Attack

The attackers behind the insidious Koobface worm have taken to using Google Reader accounts that they control to spread the worm through shared Reader items. The infection method–which has been used before by Facebook worms–is another indication of the resilience and changing tactics the malware...

Worms and Scareware Attacks on the Rise

Microsoft today released its biannual Security Intelligence Report which demonstrates some surprising conclusions about how the threat landscape is impacting enterprise networks. For example, the number of rogue security software infections, which experienced a high-profile scourge earlier this...

Update Protection against Recent Malware Threats (2-Nov-09)

The update includes new protections against 10 recent malware threats: Botnet: Backdoor.Win32.Httpbot.yiTrojan: Packed.Win32.Krap.wTrickler: Trojan.Win32.Agent2.kxuTrickler: Trojan-Downloader.Win32.Pher.ijTrickler: Trojan-Downloader.Win32.SillyFDC-DSWorm: W32.FnumbotWorm:...

The Story of the First Internet Worm

Robert Tappan Morris was the first person convicted by a jury under the Computer Fraud and Abuse Act of 1986. The story of the worm he created and what happened to him after it was released is a tale of mistakes, infamy, and ultimately the financial and professional success of its author. Read th...

Update Protection against Recent Malware Threats (21-Oct-09)

The update includes new protections against 11 recent malware threats: Backdoor: Teevsock CRogue-Software: Antivirus Pro 2010Rogue-Software: NoAdwareRogue-Software: Trust WarriorTrickler: Trojan-Downloader.Win32.Agent.cqcvTrickler: TrojanDownloader.Win32.Caxnet.ATrickler:...

Fake Conficker Alert Drops Scareware Threat

An ongoing spam campaign is once again attempting to impersonate Microsoft’s security team by mass mailing Conficker.B Infection Alerts that drop a sample of the Antivirus Pro 2010 scareware scam. Here’s a sample of what the text looks like: “Dear Microsoft Customer, Starting 18/10/2009 the...

Update Protection against Recent Malware Threats (4-Oct-09)

The update includes new protections against 20 recent malware threats:Backdoor: Trojan.Win32.StartPageRogue-Software: 007 Anti-SpywareRogue-Software: Fast Antivirus 2009Rogue-Software: PC AntiSpyware 2010Rogue-Software: Personal AntivirusRogue-Software: Rogue-Software.AVCareRogue-Software: Smart...