215 matches found
New Ice IX Variant Steals Information From Facebook Users
A new iteration of the Ice IX malware has been spotted attacking Facebook users, according to researchers at Trusteer, who claim that now the malware is trying to swindle unsuspecting users out of sensitive information like credit card numbers and addresses. After launching a web injection, the...
Microsoft, Financial Groups Execute Takedown of Zeus Botnet Servers
Microsoft has gone after another botnet, this time targeting some of the command-and-control infrastructure behind the Zeus network with a takedown effort that included seizing two IP addresses used for C&C servers and filing suit against 39 unnamed defendants. The action against Zeus is the late...
Phishing Campaign Using Spoofed US-CERT Email Addresses
On January 10, 2012, US-CERT received reports of a phishing campaign that is spoofing US-CERT email to deliver a variant of the Zeus/Zbot Trojan known as Ice-IX. This campaign appears to be targeting a large number of private sector organizations as well as federal, state, and local governments...
Ice IX: Not Cool At All
My colleague Jorge Mieres recently found a C&C server of a botnet based on a malicious program called Ice IX. As announced on several user forums, Ice IX is a bot created using the source code of ZeuS 2.0.8.9, which became publicly available in May. The author of the new bot says the program...
Ice IX, the First Crimeware Based on the Leaked ZeuS Sources
After rumors about the supposed merger between SpyEye and ZeuS, and the public release of the source of the latter, it was logical that the range of possibilities opened up even more for new cybercriminals into the ecosystem of crimeware. Consistent with this, it was only a matter of time for the...
Доменная зона .рф откровется для всех желающих 11 ноября
На проходящей в Москве конференции RIPE NCC накануне вечером было объявлено о том, что открытая доменная регистрация в российской зоне .рф стартует 11 ноября в полдень по московскому времени. Напомним, что до сих пор домены .рф могли регистрировать только госучреждения, госпредприятия,...
HP Security Digests - HP-UX security bulletins digest
HP Support Information Digests =============================================================================== o Security Bulletin Digest Split ------------------------------ The security bulletins digest has been split into multiple digests based on the operating system HP-UX, MPE/iX, and HP...
Hewlett-Packard Company MPE/iX FTPSRVR does not properly validate certain commands
Overview A vulnerability in the FTP server included with the MPE/iX operating system may allow a remote attacker to gain unauthorized access. Description MPE/iX is an operating system produced by Hewlett-Packard Company. The FTP server included with MPE/iX FTPSRVR contains a vulnerability which m...
CVE-2002-0610
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges...
CVE-2002-0609
Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service system failure with "SA1457 out of iporttimeout.fixupmessageframe" via malformed IP packets...
CVE-2002-0609
Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service system failure with "SA1457 out of iporttimeout.fixupmessageframe" via malformed IP packets...
CVE-2002-0609
CVE-2002-0609 describes a vulnerability in HP MPE/iX 6.0 through 7.0 that can cause a denial of service (system failure described as “SA1457 out of i_port_timeout.fix_up_message_frame”) when processing malformed IP packets. The provided sources identify the affected product family and the attack ...
CVE-2002-0610
The CVE-2002-0610 vulnerability affects HP MPE/iX FTPSRVR (versions 6.0–7.0). The FTP server does not properly validate certain FTP commands, enabling a remote attacker to gain unauthorized access. HP/HP-UX bulletin HPSBMP0204-014 documents the issue and provides patches: 6.0 FTPGD91A, 6.5 FTPGD9...
CVE-2002-0610
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges...
CVE-2001-1239
PowerNet IX is identified as the affected product. The CVE-2001-1239 entry describes a remote-denial-of-service condition triggered by a port scan. The available documents do not provide root cause details, affected versions, specific vulnerable components, exploit code, or remediation steps. Exp...
CVE-2001-1239
PowerNet IX allows remote attackers to cause a denial of service via a port scan...
CVE-1999-1136
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages using e-mail or modem between customer and Response Center Predictive systems...
CVE-1999-1136
CVE-1999-1136 affects Predictive on HP-UX (11.0 and earlier) and MPE/iX (5.5 and earlier). The underlying issue is in the traffic used for Predictive messages (via e-mail or modem) between customer machines and Response Center Predictive systems, which can allow an attacker to compromise data tra...
CVE-2001-0608
CVE-2001-0608 affects HP3000 systems running MPE/iX 5.5 through 6.5 with the HP architected interface facility (AIF). The vulnerability allows a user to gain additional privileges and access to databases via the AIFCHANGELOGON component. HP’s security bulletin (HPSBMP0103-011) describes the probl...