531 matches found
Exploit Kits Now Updated With New Wares Before Patches Are Ready
The creators and maintainers of exploit kits often rely on public reports of new exploits and proof-of-concept exploit code in order to be able to add new exploits to their software. And in many cases, the exploits included in kits such as Black Hole and Eleonore and others will be for...
New Java Vulnerability Coming Bundled With Exploit Kits
A recently discovered Java vulnerability that’s been circulating throughout the hacking underground has begun to show up alongside the BlackHole exploit kit, according to a post on Brian Krebs’ KrebsonSecurity blog. The National Vulnerability Database claims the vulnerability is found in the Java...
[security bulletin] HPSBOV02467 SSRT090152 rev.1 - HP TCP/IP Services for OpenVMS Running POP or IMAP, Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01908983 Version: 1 HPSBOV02467 SSRT090152 rev.1 - HP TCP/IP Services for OpenVMS Running POP or IMAP, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted...
Researcher: Malware, Increasingly Interdependent, Stifles Security Wares
BARCELONA — A researcher says that malicious software such as botnets and browser exploit kits are becoming more and more interdependent, complicating the job of those who seek to detect and remove the malware. Aditya Sood, a doctoral student in the Department of Computer Science and Engineering ...
Aviv Raff on the Evolution of Exploit Kits
In this video, via Kaspersky’s Lab Matters, Ryan Naraine and Seculert’s Aviv Raff discuss the evolution of exploit kits and the recent merger of Spyeye and Zeus...
CiscoKits 1.0 - TFTP Server Directory Traversal
CiscoKits 1.0 - TFTP Server Directory Traversal !/usr/bin/python Title : CiscoKits TFTP Server Directory Traversal Vulnerability Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory : http://secpod.org/blog/?p=301...
New Analysis Finds Java is the Weakest Link in the Security Chain
Exploit kits come and go, but the exploits they utilize remain the same, according to Securelist’s mid-year analysis of exploit kits and attack vectors. In 2010, the top five exploit kits, ordered by prevalence, were the Phoenix, Eleanor, NeoSploit, YESExploitKit, and SEOSPloitPack exploit kits...
Zeus Banking Trojan Comes to Android Phones
The Zeus banking Trojan has jumped the bridge to the large and growing ecosystem of mobile devices powered by Google’s Android operating system, according to security researchers at Fortinet. Researchers say they have obtained a Zeus variant, dubbed “Zitmo,” that can run on Android phones and tha...
Malware, Exploit Kit Writers Merging Their Talents
MALAGA, SPAIN–Botnets have been around for more than 15 years now, and for much of that time they’ve been the favored platform for attackers looking to compromise users on a large scale and monetize those infected machines. But now, as researchers and authorities begin to have more success with...
Use of Exploit Kits on the Rise
Online attacks are increasingly being carried out by multi-function exploit kits, according to research by Web security firm zSclare. In a blog post, ZScaler’s Pradeep Kulkarni claims to have observed an increase in the prevalence and usage of exploit kits in recent months, a development he...
Black Hole Exploit Kit Available for Free
Just a couple of weeks after the source code for the Zeus crimeware kit turned up on the Web, the Black Hole exploit kit now appears to be available for download for free, as well. Black Hole normally sells for $1,500 for an annual license, and is one of the more powerful attack toolkits on the...
BlackHole Exploit Kit 1.0.2 - Download !
BlackHole Exploit Kit 1.0.2 - Download ! First Public Release of BlackHole Exploit Kit. BlackHole exploit kit is yet another in an ongoing wave of attack toolkits flooding the underground market. The kit first appeared on the crimeware market in September of 2010 and ever since then has quickly...
Super Saturday : The Hacker News Featured Articles, If you miss Something !
Super Saturday : The Hacker News Featured Articles, If you miss Something ! Let's Re-collect all the Featured Recent Interesting Articles of THN, in this post. Hope you Guys will like every news By us. Please share the Links on your Facebook/ Re-tweet on Twitter and everywhere to spread the Cyber...
26 Underground Hacking Exploit Kits available for Download !
List of Hacking Exploit Kits : 1. Unknow 2. Tor 3. Target-Exploit 4. Smart pack 5. RDS 6. My poly sploit 7. multisploit 8. mypack-009 9. mypack-091 10. mypack-086 11. mypack-081 12. Mpack 13. Infector 14. Ice-pack-1 15. Ice-pack-2 16. Ice-pack-3 17. G-pack 18. Fire pack -1 19. Fire Pack -2 20...
New Generation of Exploit Kits On The Rise
“The marketplace for hacker exploit kits is getting more crowded according to research by Kaspersky Labs, which found that new tools with names like SEOsploit and Crimepack are challenging the dominance of legacy tools like the Phoenix, Eleonore, Neosploit, YESExploit, and Liberty kits. A...
M86: Email Spam Down; Third Party Phishing and Exploit Kits Up
Email users may have experienced a serious decline in spam over the past couple months, however, a Web security trends report by M86 Security released today at RSA in San Francisco says cybercriminals are coming up with new and innovative methods of phishing as well as producing increasingly robu...
Hacking kits making Cyber Crime Easy !
The incidence of cybercrime is set to increase with the proliferation of pre-made hacking software able to be used by less sophisticated criminals, research suggests. IT security software maker Symantec said attack toolkits are becoming more accessible and easier to use, allowing criminals with...
Exploit Kits Employing Obfuscation to Prevent Analysis
The creators of the Phoenix exploit kit have begun using obfuscation and other techniques to prevent security researchers and others from reverse-engineering the installation process for the kit, adopting a tactic that has become increasingly popular among attackers recently. The Phoenix exploit...
Inside the Java 0-Day Exploit
The Java Web Start vulnerability that has been getting so much attention of late is being attacked by a number of different sites now, with a relatively simple and easily reproducible exploit, researchers say. The Java flaw, which Google researcher Tavis Ormandy disclosed publicly on April 9, was...
[security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02002308 Version: 1 HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS based on Apache CSWS, Remote Denial of Service DoS, Unauthorized Disclosure of Information, Unauthorized...