Google Pushes Update For Chrome to Fix Faulty Microsoft Malware Detection

Google has pushed out an update for its Chrome browser that fixes a problem caused by the incident last week in which Microsoft Security Essentials mistakenly detected the browser as the Zeus bot and removed it from some machines. The update should automatically fix any damaged Chrome...

European Online Banking - Browser SSL Cert Bypass via IVE

Document Title: =============== European Online Banking - Browser SSL Cert Bypass via IVE References: =========== Download: http://www.vulnerability-lab.com/resources/videos/285.wmv View: http://www.youtube.com/watch?v=UB0tLo5E928 Release Date: ============= 2011-10-02 Vulnerability Laboratory ID...

European Online Banking - Browser SSL Cert Bypass via IVE

Document Title: =============== European Online Banking - Browser SSL Cert Bypass via IVE References: =========== Download: http://www.vulnerability-lab.com/resources/videos/285.wmv View: http://www.youtube.com/watch?v=UB0tLo5E928 Release Date: ============= 2011-10-02 Vulnerability Laboratory ID...

Troubling Cracks Showing in Internet's Security Foundation

The revelation last week that researchers Thai Duong and Juliano Rizzo had developed a new attack on SSL that gives them the ability to decrypt some protected sessions on the fly sparked a lot of discussions about the inherent problems of the protocol and whether it has outlived its usefulness. B...

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download Blind SQL injection Vulnerability Discovered in SpyEye Botnet by S4uR4 r00tw0rm.com Exploit : Vulnn type : Blind SQL injection vuln script : frmcardsedit.php Affected version : ALL May use any botnet from : What is SpyEye ?...

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download

Vulnerability Discovered in SpyEye Botnet , Exploit Available for Download Blind SQL injection Vulnerability Discovered in SpyEye Botnet by S4uR4 r00tw0rm.com Exploit : Vulnn type : Blind SQL injection vuln script : frmcardsedit.php Affected version : ALL May use any botnet from...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

Ice IX: Not Cool At All

My colleague Jorge Mieres recently found a C&C server of a botnet based on a malicious program called Ice IX. As announced on several user forums, Ice IX is a bot created using the source code of ZeuS 2.0.8.9, which became publicly available in May. The author of the new bot says the program...

Variant of SpyEye Targets Android Devices

Researchers at security firm Trusteer claim a new version of the SpyEye Trojan horse program that targets mobile banking users with Android mobile phones and intercepts SMS text messages to and from the phone. However, significant obstacles may prevent it from spreading. Writing on the company’s...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability zSecure team is back in news again, this time they have discovered a critical SQL injection vulnerability in HDFC Bank's Web Portal. Using this critical flaw HDFC Bank's various databases can be accessed and dumped as wel...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-31 Vulnerability Laboratory ID...

StarMoney Banking Software v8.0 - Multiple Vulnerabilities

Document Title: =============== StarMoney Banking Software v8.0 - Multiple Vulnerabilities References Source: ==================== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-31...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-30 Vulnerability Laboratory ID...

South Korean domain registrar Gabia hacked,100000 domains and 350000 users data exposed !

South Korean domain registrar Gabia hacked,100000 domains and 350000 users data exposed ! Gabia a South Korean domain registrar was hacked on Saturday, affecting the online connection with 100,000 registered domains, according to a report Monday by the Korea Herald. This hack exposing over 100,00...

La Poste FR Website - Reflective Cross Site Vulnerabilities

Document Title: =============== La Poste FR Website - Reflective Cross Site Vulnerabilities Release Date: ============= 2011-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 255 Product & Service Introduction: =============================== La Poste is the mail servi...

Ice IX, the First Crimeware Based on the Leaked ZeuS Sources

After rumors about the supposed merger between SpyEye and ZeuS, and the public release of the source of the latter, it was logical that the range of possibilities opened up even more for new cybercriminals into the ecosystem of crimeware. Consistent with this, it was only a matter of time for the...

Ramnit Worm Evolves Into Financial Malware

The Ramnit worm, known by researchers for its use of somewhat old-school malicious techniques, has now changed some of its tactics and morphed into financial malware, researchers say. As of now, researchers at Trusteer say they have no way of determining whether Ramnit has actually changed, or if...

SpyEye 1.3.45 Download - Loader source code

SpyEye 1.3.45 Download - Loader source code A new fresh and sophisticated web-based bot named SpyEye is around in the markets and looks like to be the possible successor of the famous Zeus Trojan due to its very interesting features, with the main objective to steal bank accounts, credit cards, f...