Report: Phishing Activity is Down (And That's A Bad Thing)

The number of phishing attacks declined in the first half of 2010, but a report from the Anti Phishing Working Group warns that might not be such a good thing. The group released its Global Phishing Survey on Monday covering the first six months of 2010. Overall, the survey reported a steep decli...

Adobe Issues Huge Patch for Reader and Acrobat

UPDATE: After announcing that it was accelerating a critical patch of its Reader program last week, Adobe pushed out a large patch on Tuesday, fixing 23 separate vulnerabilities in its Reader and Acrobat applications. The huge quarterly security update included company issued Security Bulletin...

В США задержаны 11 хакеров из России

Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...

Week in Review: Stuxnet Redux and The Wire's D.C. Edition

Stuxnet Redux and The Wire: United States Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news. After more than a week of intens...

More Than 60 Charged in N.Y. in Zeus Scam

The Manhattan district attorney on Thursday announced charges against 36 people in connection with the operation of the Zeus malware campaign. It’s the second major bust of suspects in the Zeus investigation this week, following the arrest of 20 people in the U.K. on Tuesday. The U.S. Attorney in...

Stolen Digital Certificates Becoming Standard Malware Components

In the 15 years or so of serious malware production before 2010, there had been perhaps a handful of examples of malicious programs using digitally signed binaries to bypass antimalware systems. The emergence of Stuxnet earlier this year brought this tactic into the center of the spotlight, and n...

LinkedIn Members Targeted by Botnet Malware

Members of LinkedIn who clicked on fake connection requests sent users to a Website that displayed “PLEASE WAITING…4 SECONDS” before redirecting them to Google. During those 4 seconds, the Website downloaded Zeus data-theft malware onto their PCs. Read the full article. eWEEK...

Zeus Botnet Raids Result in 19 UK Arrests

UK police have arrested 19 cybercrime suspects who allegedly used the ZeuS crimeware toolkit to capture online banking credentials before looting victims’ bank accounts. Read the full article. The Register...

Researcher Finds Infiltration Flaw in Zeus Botnet

A security researcher has discovered a potentially crippling vulnerability in one of the most widely used botnet toolkits, a finding that makes it easy for blackhats and whitehats alike to take control of huge networks of infected PCs. Read the full article. The Register...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

TechCrunch Europe Was Hacked

TechCrunch Europe has cleaned up its website following the discovery of malicious code that left visiting surfers exposed to infection by a variant of the infamous Zeus banking Trojan. Read the full article. The Register...

Analyzing the Latest UK Banking Botnet

More details have emerged of how security researchers tracked down a Zeus-based botnet that raided more than $1m from 3,000 compromised UK online banking accounts. Read the full article. The Register...

100K PC-Strong Zeus Botnet Disrupted

Security researchers have uncovered the command and control network of a Zeus 2 botnet sub-system targeted at UK surfers that controlled an estimated 100,000 computers. Read the full article. The Register...

Zeus Botnet Using Windows LNK Flaw

Isolated strains of mainstream malware that took advantage of how the zero-day Windows flaw first exploited by the sophisticated Stuxnet worm began appearing late last week. The same approach has since been applied by the dodgy sorts behind Zeus, a family of sophisticated toolkits frequently used...

CVE-2009-4940

ZeusCart is reported to be vulnerable to an SQL injection in index.php for version 2.3 and earlier, exploitable via the maincatid parameter in the showmaincatlanding action. The vulnerability affects ZeusCart’s input handling in the affected page, potentially allowing remote attackers to execute ...

CVE-2009-4940

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

CVE-2009-4940

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

Sql injection

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

Crimeware: A New Round of Confrontation Begins

This article provides an analysis of recent developments regarding attacks launched by malicious programs against the clients of financial organizations. This article will focus primarily on the struggle for control between financial malware, also known as crimeware1, and the antivirus industry a...

Which is the Real ZeuS Botnet?

By Roel Schouwenberg, Kaspersky Lab Amongst some others the Zeus bot is one of the most prolific bots in the wild and in the media. Lately there has been quite a few reports on the aspects surrounding Zeus, such as new research and the Troyak takedown. Naturally, this is great news. However,...