Twitter worm attack: Here's how to keep safe

From PC World Daniel Ionescu The malicious worm affecting Twitter over the weekend has now mutated and continues to invade pcworld.com the popular microblogging network. Although Twitter is taking action twitter.com against the problem, security analysts fear that further mutations of the worm wi...

Conficker hits University of Utah

University of Utah officials say a computer virus has infected more than 700 campus computers tech.yahoo.com, including those at the school’s three hospitals. University health sciences spokesman Chris Nelson said the outbreak of the Conficker worm, which can slow computers and steal personal...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Microsoft teams with Facebook to halt Koobface worm

From Facebook, by Jeff Williams, Microsoft When the Koobface worm hit Facebook users last year, the company’s security team scrambled to help affected users reset their accounts and avoid new infections. But the worm has continued to crop up periodically since then, and so the anti-malware team a...

Conficker.C stops earlier variants from spreading

From The Last Watchdog, by Byron Acohido Lost amid all of the breathless reporting on Conficker’s update mechanism this week was the fact that machines infected with the latest version of the worm, Conficker.C, have effectively stopped previous versions of the worm from spreading. As Byron Acohid...

Conficker activation passes quietly, but threat isn't over

By Sumner Lemon, IDG News Service An expected activation of the Conficker.c worm at midnight today passed without incident computerworld.com, despite sensationalized fears cbsnews.com that the Internet itself might be affected, but security researchers said users aren’t out of the woods yet. Whil...

FAQ: Conficker time bomb ticks, but don't expect boom

By Elinor Mills, ZDNet News There’s been lots of hype about the fact that the latest variant of the Conficker worm is set to start communicating with other computers on the Internet on April 1 – like an April Fool’s Day time bomb with some mysterious payload. To help clear up some of the confusio...

Conficker Worm Detection (uncredentialed check)

The remote host seems to be infected by the Conficker worm. This worm has several capabilities which allow an attacker to execute arbitrary code on the remote operating system. The remote host might also be attempting to propagate the worm to third party hosts. C Tenable Network Security, Inc...

FAQ: Conficker and April 1st

Our friends at F-Secure have put together a very valuable FAQ f-secure.com on the Conficker worm to help strip away the hype around the April 1st date. It’s a must read...

Infrastructure attacks: A growing concern

In an essay published on his personal blog doxpara.com, security researcher Dan Kaminsky is starting to sound the alarm about “the extraordinary damage” we face from infrastructure attacks, warning that the industry needs to treat infrastructure with more security due diligence and care. “Forget...

Countdown to Conficker's April 1st climax

By Byron Acohido, LastWatchdog.com Two schools of thought exist about what the Conficker worm will do come the wee hours of April 1, 2009, GMT. Some experts, like WinPatrol creator Bill Pytlovany, are sensing that the worm’s controllers will run circles lastwatchdog.com around the Microsoft-led...

Microsoft working on Paladin vulnerability analysis tool

The researchers at Microsoft are working on a new automated vulnerability analysis tool called Paladin, which will be included in the next version of the company’s Forefront enterprise security suite. The new technology was unveiled at CanSecWest last week and is designed to speed up the process ...

Researchers spot router-based botnet worm

Researchers at DroneBL have spotted signs of a stealthy router-based botnet worm zdnet.com targeting routers and DSL modems. The worm, called “psyb0t,” has been circulating since at least January this year, infecting vulnerable embedded Linux devices such as the Netcomm NB5 ADSL modem and launchi...

Twitter vulnerable to XSS worm attack

By Robert McMillan, ComputerWorld Computer security researchers have devised a new Twitter attack that they say could spread virally, much like a worm on the microblogging service. The attack, publicized by researchers at Secure Science, is an innocuous proof-of-concept that forces users to send...

Conficker worm continues to evolve, confound researchers

The Conficker worm has been wreaking havoc on the Internet for several months now, and despite the concerted efforts of dozens of security organizations around the world, it is showing no signs of fading. A new analysis of Conficker by SRI International shows that the worm’s authors have added...

The Ryan & Roel Show Episode 8

The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...

The Ryan & Roel Show Episode 6

USB Malware Mess – Fri, November 28, 2008 The boys explain the latest news around Lenovo distributing a malware-infected driver software and the network worm that forced the U.S. military to ban the use of USB drives and other forms of removable media. Download episode...

Koobface worm makes a triumphant return

A new version of the Koobface worm is making the rounds of Facebook this week, this time in the guise of an invitation to view a fake YouTube video. The link takes users to a page asking them to install an updated version of the Flash player, which is instead a piece of malware. As Brian Krebs at...

vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit

No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...