388 matches found
CryptoLocker Spam Campaign Targets Millions in UK
Tens of millions of online banking customers in the U.K. are the targets of a dangerous spam campaign enticing users to open an attachment containing the CryptoLocker ransomware. The U.K.’s National Crime Agency’s National Cyber Crime Unit posted an advisory late last week warning people to be...
Threat Outbreak Alert: Fake Account Payment Information Email Messages on November 8, 2013
Medium Alert ID: 31683 First Published: 2013 November 8 18:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the recipient to open th...
Microsoft Warns of Targeted Attacks on Windows 0-Day
Microsoft is warning users about targeted attacks against a new vulnerability in several versions of Windows and Office that could allow an attacker to take over a user’s machine. The bug, which is not yet patched, is being used as part of targeted attacks with malicious email attachments, mainly...
Threat Outbreak Alert: Fake Meeting Invitation Email Messages on December 9, 2013
Medium Alert ID: 31616 First Published: 2013 November 4 20:45 GMT Last Updated: 2013 December 10 13:39 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a meeting invitation for the recipient. The text in the email message...
Upatre Malware Infections on the Rise
Researchers from the Microsoft Malware Protection Center MMPC have seen a spike in Win/32.Upatre infections in recent months. The trojan compromises host machines through malicious email attachments and, once installed, moves to download different malware from its command and control server. The...
Microsoft Windows TrueType Font CMAP Table CVE-2013-3894 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot...
Microsoft Windows OpenType Font Parsing CVE-2013-3128 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot Avay...
Microsoft Word CVE-2013-3849 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3857 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3847 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3850 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3854 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
MS13-061: Vulnerabilities in Microsoft Exchange Server could allow remote code execution: August 13, 2013
Resolves vulnerabilities in Microsoft Exchange Server that could allow remote code execution if a user on an affected Exchange server views a specially crafted file in an email attachment.INTRODUCTIONMicrosoft has released security bulletin MS13-061. To view the complete security bulletin, go to...
Recent Reports of DHS-Themed Ransomware (UPDATE)
US-CERT has received reports of increased activity concerning an apparently DHS-themed ransomware malware infection occurring in the wild. Users who are being targeted by the ransomware receive a message claiming that use of their computer has been suspended and that the user must pay a fine to...
Threat Outbreak Alert: Fake Bank Payment Information Email Messages on August 19, 2013
Medium Alert ID: 30204 First Published: 2013 July 24 16:26 GMT Last Updated: 2013 August 19 17:23 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank payment information for the recipient. The text in the email message...
Threat Outbreak Alert: Fake Craft Item Sales Solicitation Email Messages on July 3, 2013
Medium Alert ID: 29947 First Published: 2013 July 5 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a craft items presentation for the recipient. The text in the email message attempts to persuade...
Threat Outbreak Alert: Fake Invoice Attachment Email Messages on June 22, 2013
Medium Alert ID: 29751 First Published: 2013 June 24 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment for the recipient. The text in the email message attempts to convince the recipient to open...
Threat Outbreak Alert: Fake Product Order Email Messages on June 19, 2013
Medium Alert ID: 29725 First Published: 2013 June 19 18:44 GMT Last Updated: 2013 June 20 14:13 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote for the recipient. The text in the email message...
CareerBuilder man in the browser attack
No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...
Microsoft Publisher CVE-2013-1317 Remote Integer Overflow Vulnerability
Description Microsoft Publisher is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of...