Report: Q2 Threat Evolution, the Year of the Hacktivist?

Scareware and Rogue AV are back with a vengeance in 2011, after receding in 2010 according to Kaspersky Lab’s latest threat evolution report. According to the report, the rogue AV resurgence is significant not only in scope, which was substantial, with the Kaspersky Security Network KSN detecting...

More Allegations Link Murdoch's Media Empire to "Ethical Hackers"

ED: More Allegations Link Murdoch’s Media Empire to “Ethical Hackers” DEK: New reports add weight to accusations that Rupert Murdoch’s News of the World may have used professional hackers and malicious programs to obtain information that was then used in news reports. The ‘drip drip drip’ of...

Step 5: Re-install Security Software

Once the scareware has been removed from your system, reinstall a reputable anti virus software package then use it to scan and clean your machine, once again. Scareware and rogue antivirus programs will often download and install other kinds of malicious programs while they have control of your...

Where to Begin

Scareware is one of the most pernicious online threats. For those who have been infected, it is also one of the hardest to forget. Rogue antivirus software and other forms of scareware hold victims hostage: shutting off access to their desktop and most of the Internet, disabling security software...

PandaLabs Uncovers the Cyber-Crime Black Market

Inventory is growing and prices are dropping on the cyber crime black market, according to a new report from security firm Panda Labs. Stolen banking credentials, malicious programs and stolen credit cards are all for sale online in what Panda experts say is a flourishing criminal black market...

Image of the Day: Dissecting The ZeroAccess Crimeware

We know a lot about the effects of malicious programs like rootkits and Trojan downloaders. The job of finding out exactly how the programs work, however, is painstaking. That’s because most malware authors worth their salt take steps to make their creations hard to understand. Code obfuscation a...

Число новых компьютерных вирусов в 2010 году приближается к 2 миллионам

12:30 17.09.2010 По данным Nielsen Online, 51 % европейцев пользуются социальными сетями, такими как Facebook или Xing. Популярность социальных сетей привлекает кибер-преступников, которые используют их с целью нападения на пользователей. Преступники создают компьютерные вирусы для получения...

Пресечена деятельность хакеров-вымогателей

Источник: http://www.kguvd.ru/news/7 Когда: 31 Августа, 2010 Оперативники отдела "К" и УБЭП ГУВД Москвы пресекли деятельность группы хакеров, заражавших вредоносными программами компьютеры пользователей и вымогавших деньги за разблокировку. Деньги взимались с помощью платных SMS стоимостью от 300...

{PRL} Rising Antivirus 2009 Privilege Escalation

Application: Rising Antivirus 2009 Platforms: Windows XP Professional SP2 Exploitation: Privilege Escalation Date: 2009-10-26 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction...

Rising Antivirus 2009 Privilege Escalation

No description provided by source. Application: Rising Antivirus 2009 Platforms: Windows XP Professional SP2 Exploitation: Privilege Escalation Date: 2009-10-26 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction...

Top 5 Tips to Avoid Viruses and Spyware

In this video, Chris Pirillo offers some valuable advice for keeping your computer safe from malicious programs:...

CVE-2007-5618

CVE-2007-5618 refers to an unquoted Windows search path vulnerability in VMware products (Workstation, Player, Server, ACE) prior to specified fixed versions. The issue allows local users to gain privileges by exploiting improperly quoted paths in Authorization and other services. Affected ranges...

CVE-2006-1476

Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" with no characters before the ".", which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious...

CVE-2006-0576

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...

CVE-2002-1469

scponly does not properly verify the path when finding the 1 scp or 2 sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs...

CVE-2001-0048

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

CVE-1999-0376

CVE-1999-0376 involves a local privilege-escalation in Windows NT where an attacker can obtain administrator privileges by modifying the KnownDLLs list to reference malicious programs. The linked sources (Red Hat, NVD, CVE list) all describe the same vulnerability: local user access can be abused...