New 'Drive-By Email' Attack Found in Wild

A new email-based threat is capable of infecting a machine even without opening any attachments within, according to a report from the Daily Mail. The emails, which reportedly download their payload once opened, are not directly infected and therefore will not trigger detection by anti-virus...

Barracuda Spam/Virus WAF 600 multiple security vulnerabilities

Different Web interface vulnerabilities...

[Suspected Spam] Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities

Title: ====== Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities Date: ===== 2012-01-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=28 VL-ID: ===== 28 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. The Barracuda...

Denial-of-Service Malware Campaign

US-CERT is aware of public reports of ongoing distributed denial-of-service attacks against entities in the government and private sector. According to the reports, these attacks are being attributed to the hacker group Anonymous. US-CERT encourages users and administrators to do the following to...

Barracuda Spam/Virus WAF 600 Cross Site Scripting

Title: ====== Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities Date: ===== 2012-01-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=28 VL-ID: ===== 28 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. The Barracuda...

Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities

Document Title: =============== Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=28 Release Date: ============= 2012-01-18 Vulnerability Laboratory ID VL-ID: ==================================== 28...

Data Stealing Malware on Internal Computer of Japan Space Agency

Data Stealing Malware on Internal Computer of Japan Space Agency Japan Aerospace Exploration Agency JAXA announce that their computer has been infected with a virus, leading to a possible leak of data on its H-II Transfer Vehicle HTV the craft popularly known as Konotori that hauls cargo for the...

Self-extracting archive (SFX) as Creative Virus Handler

Self-extracting archive SFX as Creative Virus Handler Yesterday I Found and interesting article about "Self-extracting archive SFX" on Unremote.org by DarkCoderSc. SFX is a little application that contains compressed files. Creating a customized WinRAR SFX archives is a very easy task, but not al...

Microsoft Office Word Malicious Macro Execution

This module injects a malicious macro into a Microsoft Office Word document docx. The comments field in the metadata is injected with a Base64 encoded payload, which will be decoded by the macro and execute as a Windows executable. For a successful attack, the victim is required to manually enabl...

Phishing Campaign Using Spoofed US-CERT Email Addresses

On January 10, 2012, US-CERT received reports of a phishing campaign that is spoofing US-CERT email to deliver a variant of the Zeus/Zbot Trojan known as Ice-IX. This campaign appears to be targeting a large number of private sector organizations as well as federal, state, and local governments...

Japan developing cyber weapons for Counter Attacks

Japan developing cyber weapons for Counter Attack Japanese technology firm Fujitsu is developing a 'seek and destroy' virus which could identify and combat hacking and other cyber threats in a more effective way. The weapon is the culmination of a 179 million yen three-year project entrusted by t...

Fake Antivirus Scams Targeting Android Users

Fake antivirus software, or “scareware” scams have been one of the tried and true methods that crooks have used to make illegal profits online in recent years. The scams often offer convincing replicas of legitimate anti malware software to trick users into installing malicious programs that can...

Ultimate Encoder - PHP Encoder with multiple compression by lionaneesh

Ultimate Encoder - PHP Encoder with multiple compression by lionaneesh "Ultimate Encoder" - Another Online tool by lionaneesh, an Indian developer and Hacker. Its a PHP Encoder with multiple compression. A Piece of code can be encoded multiple times making it impossible for any Anti Virus to...

Kaspersky Internet Security Memory Corruption Vulnerability

Kaspersky Internet Security Memory Corruption Vulnerability Vulnerability-Lab Team discovered a Memory & Pointer Corruption Vulnerability on Kaspersky Internet Security 2011/2012 & Kaspersky Anti-Virus 2011/2012. A Memory Corruption vulnerability is detected on Kaspersky Internet Security 2011/20...

Kaspersky Internet Security/Anti-Virus - '.cfg' File Memory Corruption

source: https://www.securityfocus.com/bid/51161/info Kaspersky Internet Security and Anti-Virus are prone to a local memory-corruption vulnerability. A local attacker can exploit this issue to cause the affected application to crash, denying service to legitimate users. Due to the nature of this...

Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability

No description provided by source. References: =========== http://www.vulnerability-lab.com/getcontent.php?id=129 Introduction: ============= Kaspersky Internet Security 2011 has everything that you need to stay safe and secure while you re surfing the web. It provides constant protection for you...

Kaspersky Internet SecurityAnti-Virus - .cfg File Memory Corruption

Kaspersky Internet SecurityAnti-Virus - .cfg File Memory Corruption source: https://www.securityfocus.com/bid/51161/info Kaspersky Internet Security and Anti-Virus are prone to a local memory-corruption vulnerability. A local attacker can exploit this issue to cause the affected application to...

USAA Phishing Scam and Malware Campaign

US-CERT is aware of public reports of an active spear-phishing attack via email messages directed at United Services Automobile Association USAA members. These messages contain the subject line "Deposit Posted" and contain a randomly generated four-digit number placed in the USAA security zone...

SpamTitan v5.08 - Multiple Web Vulnerabilities

Document Title: =============== SpamTitan v5.08 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=91 Release Date: ============= 2011-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 91 Product &...

Kaspersky IS&AV 2012 - Memory Corruption Vulnerability

Document Title: =============== Kaspersky IS&AV 2012 - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=129 http://www.vulnerability-lab.com/getcontent.php?id=19 Release Date: ============= 2011-12-18 Vulnerability Laborato...