Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine SEO optimization tactics to promote fake Olympics videos that are spreading malware. Read the full...

IRS Phishing Scam Targets Corporations

Fake emails claiming to be from the IRS are a variation of the usual IRS phishing expeditions that typically target end users during tax time, but this campaign aims to infect organizational machines through corporate rather than personal email. Read the full article. Infosecurity...

Mozilla Admits Malware Sneaked into Firefox Add-ons

Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...

Beware of False Firefox Adware Site

Adware slingers have taken advantage of the buzz around the latest version of Firefox to establish a fake browser download site. Read the full article. The Register...

Threat Outbreak Alert: Fake Personal Photos Email Messages on January 18, 2010

Low Alert ID: 19740 First Published: 2010 January 19 19:22 GMT Last Updated: 2010 February 23 21:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim the recipient has received personal photos.� The text in the e-mail message...

BIND 9 DNSSEC validation code could cause fake NXDOMAIN responses

Overview A vulnerability exists in the BIND 9 DNSSEC validation code that could be used by an attacker to generate fake NXDOMAIN responses. Description BIND 9 contains a vulnerability in DNSSEC validation code. According to ISC: There was an error in the DNSSEC NSEC/NSEC3 validation code that cou...

Fujitsu Interstage and Systemwalker SSL Vulnerabilities

Overview Fujitsu Interstage and Systemwalker related products have the vulnerabilities listed below: - A buffer overflow vulnerability that can occur when the SSL server verifies the client's certificate. - A vulnerability that makes it possible to make an SSL connection using a server or client...

New Spam Tactics Threaten Social Networks

If you think the spam problem is bad right now — and it is, with more than 90 percent of email consisting of spam — the good news is it’s not going to get worse. The bad news is it’s going to get much worse. Spam is a huge business and spammers, like all business owners, are always looking for ne...

PHP 5.3.1 open_basedir bypass

hi, in php 5.3.1 security changelog, we can read, that safemode bypass in tempnam has been already fixed. But safemode in 5.3 line is deprecated. We can understand security fix for openbasedir bypass, but not for safemode in 5.3. Annoying is the fact, that exploit for bypass openbasedir or safemo...

Koobface Stocking Stuffer Malware

The Koobface botnet, one of the most efficient social engineering driven botnets, is entering the Xmas season with a newly introduced template spoofing a YouTube video page, in between enticing the visitor into installing a bogus Adobe Flash Player Update New Koobface campaign spoofs Adobe’s Flas...

Eureka Mail Client Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: DrIDE and dookie2000ca Found By: Francis Provencher PRL Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the...

Eureka Email Client - Remote Buffer Overflow

Eureka Email Client - Remote Buffer Overflow !/usr/bin/env python Found By: Francis Provencher PRL Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the client to this address and check your mail import sys, socket egghunter 32 bytes egghunter =...

Eureka Email Client - Remote Buffer Overflow

!/usr/bin/env python Found By: Francis Provencher PRL Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set the client to this address and check your mail import sys, socket egghunter 32 bytes egghunter =...

Fake Hit Generator 2.1 Shell Upload Vulnerability

No description provided by source. Exploit Title: Fake Hit Generator Shell Upload Vulnerability Date: 25.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and All 1923turk.biz Members Version: 2.1 Dork: "Upload unique IP List:" and "The Ultimate Fake Hit Generator - BOOST YOUR ALEXA RANK"...

New Mac Phishing Attack

An email which purports to relate to a recent Apple retail transaction and asks for details of any recent orders is out there. The email also carries a stuffed file. This contains an ‘exe’ file which will only launch on a Windows machine. The email reads: “We recorded a payment request from ‘Appl...

SEO Scareware Campaign Compromises 200K Websites

Security researchers have detected a massive blackhat SEO search engine optimization campaign consisting of over 200,000 compromised web sites, all redirecting to fake security software Inst58s6.exe, commonly referred to as scareware. The massive blackat SEO campaign has been launched by the same...

Torrent Swarm Poisoning

=== Credits === Written by Burningmace. Thanks to Blindkilla for helping me out. === Introduction === The BitTorrent protocol identifies peers using a tracker. Each peer announces itself to the tracker via HTTP. Certain parameters in the announce request itself can be altered in order to fake the...

Verizon Wireless Customers Beware of Trojan Horse

Cyber-criminals have started preying on Verizon Wireless customers, sending out spam e-mail messages that say their accounts are over the limit and offering them a “balance checker” program to review their payments. The e-mail messages, which look like they come from Verizon Wireless, are fakes;...

Microsoft Threatens Discoverer of 'Cash Back' Loophole in Bing

The security glitch, which is linked to a “cash back” system operated by Bing, potentially leaves users and retailers exposed to fake transactions. But despite an outcry online over the existence of the loophole, the world’s largest company has responded to the issue by threatening legal action...

Google Reader Used in Koobface Attack

The attackers behind the insidious Koobface worm have taken to using Google Reader accounts that they control to spread the worm through shared Reader items. The infection method–which has been used before by Facebook worms–is another indication of the resilience and changing tactics the malware...