420 matches found
How ZeuS Trojan Infects and Steals Money: What You Need to Know
You can get a ZeuS infection through a drive-by download from a malicious website or a hacked legitimate site. Clicking a link in an innocent-looking email can also open your system to attack. This past week, there was a surge of fake LinkedIn connection requests linked to ZeuS. While savvy users...
Tracker: SpyEye Not Yet Zeus-Like In Stature
The SpyEye Tracker, a new site that hopes to trace the activity of the budding SpyEye Trojan, went live this week and shows the emerging SpyEye botnet to be global in reach, but still much smaller than the Zeus botnet with which it has merged. SpyEye Tracker has already identified 68 malicious...
Security Week In Review: Evercookies, SQL Slammer and a Flood of Patches
This week seemed to be all about the numbers as a handful of reports were released, disclosing new stats on phishing, information theft and spam. Evercookies, the inside story of SQL Slammer, and of course, the usual array of patches, rounded out the week. Read on for the full week in review. The...
Report: Phishing Activity is Down (And That's A Bad Thing)
The number of phishing attacks declined in the first half of 2010, but a report from the Anti Phishing Working Group warns that might not be such a good thing. The group released its Global Phishing Survey on Monday covering the first six months of 2010. Overall, the survey reported a steep decli...
Adobe Issues Huge Patch for Reader and Acrobat
UPDATE: After announcing that it was accelerating a critical patch of its Reader program last week, Adobe pushed out a large patch on Tuesday, fixing 23 separate vulnerabilities in its Reader and Acrobat applications. The huge quarterly security update included company issued Security Bulletin...
В США задержаны 11 хакеров из России
Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...
Week in Review: Stuxnet Redux and The Wire's D.C. Edition
Stuxnet Redux and The Wire: United States Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news. After more than a week of intens...
More Than 60 Charged in N.Y. in Zeus Scam
The Manhattan district attorney on Thursday announced charges against 36 people in connection with the operation of the Zeus malware campaign. It’s the second major bust of suspects in the Zeus investigation this week, following the arrest of 20 people in the U.K. on Tuesday. The U.S. Attorney in...
Stolen Digital Certificates Becoming Standard Malware Components
In the 15 years or so of serious malware production before 2010, there had been perhaps a handful of examples of malicious programs using digitally signed binaries to bypass antimalware systems. The emergence of Stuxnet earlier this year brought this tactic into the center of the spotlight, and n...
LinkedIn Members Targeted by Botnet Malware
Members of LinkedIn who clicked on fake connection requests sent users to a Website that displayed “PLEASE WAITING…4 SECONDS” before redirecting them to Google. During those 4 seconds, the Website downloaded Zeus data-theft malware onto their PCs. Read the full article. eWEEK...
Zeus Botnet Raids Result in 19 UK Arrests
UK police have arrested 19 cybercrime suspects who allegedly used the ZeuS crimeware toolkit to capture online banking credentials before looting victims’ bank accounts. Read the full article. The Register...
Researcher Finds Infiltration Flaw in Zeus Botnet
A security researcher has discovered a potentially crippling vulnerability in one of the most widely used botnet toolkits, a finding that makes it easy for blackhats and whitehats alike to take control of huge networks of infected PCs. Read the full article. The Register...
Zeus Variant Targets Mobile Online Banking Apps
Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...
TechCrunch Europe Was Hacked
TechCrunch Europe has cleaned up its website following the discovery of malicious code that left visiting surfers exposed to infection by a variant of the infamous Zeus banking Trojan. Read the full article. The Register...
Analyzing the Latest UK Banking Botnet
More details have emerged of how security researchers tracked down a Zeus-based botnet that raided more than $1m from 3,000 compromised UK online banking accounts. Read the full article. The Register...
100K PC-Strong Zeus Botnet Disrupted
Security researchers have uncovered the command and control network of a Zeus 2 botnet sub-system targeted at UK surfers that controlled an estimated 100,000 computers. Read the full article. The Register...
Zeus Botnet Using Windows LNK Flaw
Isolated strains of mainstream malware that took advantage of how the zero-day Windows flaw first exploited by the sophisticated Stuxnet worm began appearing late last week. The same approach has since been applied by the dodgy sorts behind Zeus, a family of sophisticated toolkits frequently used...
CVE-2009-4940
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...
CVE-2009-4940
ZeusCart is reported to be vulnerable to an SQL injection in index.php for version 2.3 and earlier, exploitable via the maincatid parameter in the showmaincatlanding action. The vulnerability affects ZeusCart’s input handling in the affected page, potentially allowing remote attackers to execute ...
