The life and death of the ZeuS Trojan

Whether youve read up on Greek mythology or youre simply a big fan of Marvel comics, the name "Zeus" should be familiar to you. In the context of cybercrime though, ZeuS aka the Zbot Trojan is a once-prolific malware that could easily be described as one of a handful of information stealers ahead...

Phishing Campaign Using Spoofed US-CERT Email Addresses

On January 10, 2012, US-CERT received reports of a phishing campaign that is spoofing US-CERT email to deliver a variant of the Zeus/Zbot Trojan known as Ice-IX. This campaign appears to be targeting a large number of private sector organizations as well as federal, state, and local governments...

Threat Outbreak Alert: Fake User Website Profile Email Messages on February 5, 2014

Medium Alert ID: 21921 First Published: 2010 November 29 14:22 GMT Last Updated: 2014 February 6 13:45 GMT Version: 4 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an attachment with information about a website profil...

Zbot Trojan Discovered As Drive-By Download

The notorious information-stealing Zeus trojan is currently spreading via drive-by download. Those behind Zeus, or Zbot, recently began circulating spam claiming to come from the Internal Revenue Service IRS, requesting users submit a “tax refund request form” by clicking on a link that is...

Malware Spreading Through Phony FDIC Alerts

There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails tell the recipients that their banks have filed for bankruptcy and that the banks’ asserts are now under the control of the FDIC. The links offered in the...

Outlook Web Access Attack Using Pushdo Botnet

Here are some technical details on the Outlook Web Access phishing scheme. 1. The Spam According to our preliminary research, the spam emails which attacked OWA users, including Kaspersky, were sent using the pushdo botnet – which is based on malware from the Backdoor.Win32.NewRes family. These...