First Large Cyber Espionage Activity against Pakistan Emanating From India

Cyber Security researchers have discovered a family of information stealing malware targeting Pakistan that originates out of India. Norman Shark, the global security leader in malware analysis solutions for enterprises, service providers and government, today released a report detailing a large...

Safe Targeted Espionage Campaign Borrows from Cybercriminals

More and more, we’re hearing about a crossing of the streams, if you will, between cybercrime and state-sponsored attackers. Elements of malware, code persistence and distribution techniques are bleeding over between one realm of hacking into the other as each side tries to fill gaps in their...

First Large Cyber Espionage Activity against Pakistan Emanating From India

Cyber Security researchers have discovered a family of information stealing malware targeting Pakistan that originates out of India. Norman Shark, the global security leader in malware analysis solutions for enterprises, service providers and government, today released a report detailing a large...

Move Over Conficker, Web Threats are Top Enterprise Risk

Microsoft is ready to officially declare network worms passé for the enterprise. In its latest Security Intelligence Report, released Wednesday, Microsoft said that risks posed by Web-based threats to large, distributed network environments have surpassed malware such as Conficker. The report is...

Fork CMS Cross Site Scripting

=================================================================================== Fork-CMS Stored XSS: Stored XSS: Author: Rafay Baloch Introduction: Cross Site scritping XSS has been a problem for ages, XSS occurs when the input data is copied into application responses without being sanitized...

The Pirate Bay co-founder charged for hacking and stealing money

The Pirate Bay co-founder Gottfrid Svartholm Warg Anakata charged with hacking the IBM mainframe of Logica, a Swedish IT firm that provided tax services to the Swedish government, and the IBM mainframe of the Swedish Nordea bank. Svartholm has been charged with several hacking related offenses...

Shylock Trojan Going Global with New Features, Resilient Infrastructure

The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...

Cybercriminals Use Evernote as C&C

At least one group of cybercriminals has taken to Evernote, the popular cloud-based note-taking and data-sharing service, as a base of operations for a data stealing Trojan, according to TrendMicro threat response engineer Nikko Tamana. TrendMicro detected the threat as “BKDRVERNOT.A” and observe...

Lime Pop Emerges as the Latest Strain of Android Enesoluty Malware

A new variant of Android.Enesoluty, the Android data-stealing Trojan that spreads through spam messages, has recently surfaced in Japan. This time the malware is reportedly being spread through a malicious app, Lime Pop, that disguises itself as a popular game. According to a post on Symantec’s...

Atmail WebMail - INBOX.Trash?mailId Reflected Cross-Site Scripting

Atmail WebMail - INBOX.Trash?mailId Reflected Cross-Site Scripting source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Eurograbber

The Eurograbber Trojan targets bank customers. The attack infects computers and mobile devices. The Trojan attempts to steal money from the victim's bank account...

Researchers Discovery Data-Stealing Malware That Likes to Nap

Researchers at FireEye’s Malware Intelligence Lab say they’ve found malware that attempts to evade detection with extended sleep calls and uses “the fast flux technique” to hide the attacker’s identity. They are calling the malicious downloader “Trojan Nap” and notes it uses a technique akin to t...

WordPress Theme flashnews - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/57676/info The flashnews Theme for WordPress is prone to multiple input-validation vulnerabilities. An attacker may leverage these issues to cause denial-of-service conditions, disclose sensitive information, upload arbitrary files to the affected compute...

Apple Safari 6.0.2 (OS X) file:// Multiple Vulnerabilities

The Safari web browser allows documents opened with the file:// schema to use JavaScript in a way that can be used for malicious purposes, such as stealing information about the target user from websites such as social networks, modifying the contents of a window to other websites but keeping the...

Microsoft Internet Explorer 89 - Steal Any Cookie

Microsoft Internet Explorer 89 - Steal Any Cookie Exploit Title: Internet Explorer 8 & Internet Explorer 9 steal any Cookie Date: 27.01.2013 Exploit Author: Christian Haider; Email: christian.haider.poc @ gmail dot com; linkedin: http://www.linkedin.com/in/chrishaider Category: remote Vendor...

Carberp Banking Trojan Goes Commercial; Adds Bootkit and $40K Price Tag

You can say one thing for the underground malware distribution market, there’s certainly never a lack of drama. Weeks after the banning of Aquabox, the keeper of the Citadel banking Trojan, from an underground forum, another player has popped up to fill the market gap, this time with a new versio...

WordPress ABC Test Plugin 0.1 Cross Site Script XSS

ABC Test lets to present quizzes with three options for each question. At the end of the quiz the user has a response based on the prevalence of answers A, B or C. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Shylock malware : Undetectable virus stealing bank account information

Shylock, a financial malware platform discovered by Trusteer in 2011, is a non-Zeus-based information-stealing trojan that improved methodology for injecting code into additional browser processes to take control of a computer, and an improved evasion technique to prevent malware scanners from...

Malware Swipes Rocket Data from Japanese space agency

Japan's space agency says it is investigating a possible leak of data about its Epsilon rocket due to a computer virus. Malware Case : The Japan Aerospace Exploration Agency said the virus, in a computer at its Tsukuba Space Centre, north-east of Tokyo, was found to be secretly collecting data an...

New OSX/Imuler Variant Targeting Tibetan Activists

Researchers over at Intego have recently discovered a new variant of OSX/Imuler the data-stealing Mac malware, detected as OSX/Imuler.E which is believed to be targeting Tibetan rights activists. "This backdoor Trojan family was first discovered in September 2011 as a Mac PDF Trojan horse and has...