Dirt Jumper Caught in the Act

In late July 2011, a specific piece of malware came to our attention. Analysis revealed that this particular piece of malware was launching DDoS attacks and we have direct evidence of DDoS attack on two Russian websites. One of these was a gaming website, the other involved in selling a popular...

Reports: Rustock Born in the USA

U.S. hosting firms accounted for the bulk of the command and control centers for the Rustock botnet, with many firms claiming that they had no idea they were harboring an illegal criminal network on their infrastructure, according to a story in Krebsonsecurity.com. Threatpost reported last week...

Twitter Botnet Discovered in Mexico

Security researchers have discovered another botnet that uses Twitter as a command and control channel. Read the full article. The Register...

Mariposa Bot Found Pre-Loaded on Second Vodafone Handset

It seems that the HTC Magic phone distributed by Vodafone in Spain that security researchers discovered recently was pre-loaded with the Mariposa bot client was not an isolated incident after all, as the concerned party had claimed. An employee of another Spanish security vendor found the same...

CMD Backdoor for the remote execution of arbitrary code-a vulnerability warning-the black bar safety net

| The following is quoted fragment: The originalCMD Backdoor for the remote execution of arbitrary code Double-click automatically scroll Publisher: zero release time: 2006-3-20 read: 4 3 times VB CMD Backdoor for remote execution of arbitrary commands source code. Function automatic complex...

CVE-2005-2790

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client...

CVE-2005-2791

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, allows remote attackers to cause a denial of service refused new connections via a series of connections and disconnections without sending the login command...

CVE-2005-2790

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client...

btftp.txt

/ - Tools you will probably need: - http://www.digitalmunition.com/setbd-affix.c - KF is one bad mofo /str0ke Remote Nokia Affix btftp client exploit by kflistsatsecnetopsdotcom threat: btftp Affix version: Affix 2.1.1 Wellcome to OBEX ftp. Type ? for help. Mode: Bluetooth SDP: yes ftp open...