Researchers Find Trojan Using Facebook

Researchers at Symantec have discovered a trojan that uses Facebook to communicate with a control and command server. Dubbed “whitewell” this malware spreads via email, contacts the mobile version of Facebook and uses its Notes section to perform actions based on the Notes titles. Andrea Lelli...

Malware Spreading Through Phony FDIC Alerts

There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails tell the recipients that their banks have filed for bankruptcy and that the banks’ asserts are now under the control of the FDIC. The links offered in the...

Update Protection against Recent Malware Threats (2-Nov-09)

The update includes new protections against 10 recent malware threats: Botnet: Backdoor.Win32.Httpbot.yiTrojan: Packed.Win32.Krap.wTrickler: Trojan.Win32.Agent2.kxuTrickler: Trojan-Downloader.Win32.Pher.ijTrickler: Trojan-Downloader.Win32.SillyFDC-DSWorm: W32.FnumbotWorm:...

Inside The Opachki Link Hijacker Trojan

Opachki is one of many software tools developed by criminals to hijack and monetize Windows users’ search traffic using affilate-based search engines that are ultimately advertiser-sponsored, sometimes by well-known and respected firms. Instead of only hijacking search result links, Opachki...

FBI: SMBs Lost $40M in Bank Trojan Attacks

Hackers using a sophisticated network of banking Trojans money mules have stolen about $40 million from small and medium-sized businesses in the U.S., according to the latest installment in a series by Washington Post writer Brian Krebs. Krebs quotes an FBI official as saying the criminals involv...

Update Protection against Recent Malware Threats (21-Oct-09)

The update includes new protections against 11 recent malware threats: Backdoor: Teevsock CRogue-Software: Antivirus Pro 2010Rogue-Software: NoAdwareRogue-Software: Trust WarriorTrickler: Trojan-Downloader.Win32.Agent.cqcvTrickler: TrojanDownloader.Win32.Caxnet.ATrickler:...

Outlook Web Access Attack Using Pushdo Botnet

Here are some technical details on the Outlook Web Access phishing scheme. 1. The Spam According to our preliminary research, the spam emails which attacked OWA users, including Kaspersky, were sent using the pushdo botnet – which is based on malware from the Backdoor.Win32.NewRes family. These...

Zeus Trojan Part of New Outlook Web Access Phishing Scam

The attackers behind the Zeus Trojan have unleashed a new phishing scam that is specifically targeted at users of the popular corporate webmail tool Outlook Web Access. The phishing emails include the recipient’s actual email address and appear to be an update to the OWA application. The mail...

Malware Flea Market Pays Hackers to Hijack PCs

Among a slew of online cybercrime forums, Pay-Per-Install.org stands out as a malware flea market where shadowy pushers of Trojan downloaders and tools for evading detection are bargaining with thousands of would-be “affiliates” willing to compromise victims’ computers globally and get paid for i...

Malware Economy is Thriving

TORONTO — The legitimate economy may be in rough shape right now, but the same cannot be said for the underground economy. Malware authors and botmasters are thriving, experts say, with some online criminals charging as much as $3,500 for their attack toolkits. But don’t be intimidated by the hig...

Inside the URLZone Trojan Network

Security researchers tracking the URL Zone malware/botnet have stumbled upon a new tactic being used by cyber-criminals to hide information on the money mules being used to transfer stolen funds from compromised online bank accounts. URLZone, which targets computer users in Western Europe, is a...

Update Protection against Recent Malware Threats (4-Oct-09)

The update includes new protections against 20 recent malware threats:Backdoor: Trojan.Win32.StartPageRogue-Software: 007 Anti-SpywareRogue-Software: Fast Antivirus 2009Rogue-Software: PC AntiSpyware 2010Rogue-Software: Personal AntivirusRogue-Software: Rogue-Software.AVCareRogue-Software: Smart...

union select control ewebeditor Upload File suffix-vulnerability warning-the black bar safety net

Form:dark group technology Forum union select control ewebeditor Upload File suffix2.16 Currently circulating online too much ewebeidtor a modified version of the lite version 2 1 6 version of ewebeditor the presence of an injection vulnerabilities after a version also exists such a problem Some...

CVE-2009-3482

TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions Everyone: Full Control for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs...

SMBs, Non-Profits New Targets of Choice for Attackers

Large enterprises and consumers have been dealing with sophisticated phishing scams, online extortion plots and other assorted theft schemes for years, but now attackers are turning their attention to the huge population of small businesses and non-profits in the U.S. And they are finding a gold...

Hacking knowledge: how to hide PHP file Backdoor tricks-vulnerability warning-the black bar safety net

Recently many friends are asking if I can put my word Trojan is hidden to the HTML or pictures, in fact the word Trojan is inserted into the PHP file will already be concealed, and if said literally to be placed into the HTML file or picture, then read this article test report. You want to know i...

dedecms injection vulnerability affecting version 5. 3 – 5.5 Posted in php-vulnerability warning-the black bar safety net

Excerpt from: hacking notes dedecms5. 3 and 5. The 5-Series version, there is a major injection vulnerability, Please note the following offensive, only for research. Exploit this vulnerability to illegal activities, at your peril. Suppose domain name is: www. abc. com the attack steps are as...

Gaming Mouse-Maker Razer Hit With Infected Firmware

Gamers trying to update their mouse or keyboard drivers from accessory maker Razer USA’s Web site recently may have gotten more than they bargained for. According to the IDG News Service, the company’s computers appear to have been hacked, and its support site used to spread malicious Trojan hors...

php using Shell. Application to program execution-vulnerability warning-the black bar safety net

On the use of the Shell. Application to execute the program in Hai Duong to the top of the asp Trojan is with an example. With ShellExecute this method. Today tried it with the open also can. the php code is as follows, I feel like I haven't in the php webshell to see Related methods ? php $wsh =...

Rookie Club of the simple broiler production big run-vulnerability warning-the black bar safety net

A. Preface.. Back door making for success after the invasion to maintain Rights has a very important significance,this article describes a simple and practical the back door of the production technology,as well as how to make a broiler. Ha ha hado not turn into bad kids! II. Ready.. First, we nee...