Monthly Archives: July 2010

Phishers Want You to Have a Coke and a Drive-by

By Andrew Brandt As recently as a few months ago, malware distributors went to what looked like great lengths to craft complex, sophisticated Web pages designed to trick visitors into believing they were visiting a page with an embedded video and — oops! — you need to update your copy of Adobe Flash in order [...]

Starcraft 2 Launch Day Piracy Infects Eager Gamers

By Andrew Brandt While some members of our Threat Research group are attending talks at the Black Hat Briefings, the rest of the team is back at our offices, hard at work watching for novel threats.  That’s good news for gamers, and bad news for malware distributors who might try to take advantage of a [...]

“Fingerprint” Helps Identify Malware Authors

By Andrew Brandt The Threat Research group sat in on a talk by HBGary CEO Greg Hoglund yesterday where the regular speaker discussed some research he’s been doing over the past year that he hopes will help connect malware samples to known groups of malware creators. While that sounds promising for law enforcement, it’s actually [...]

Weird Malware on Display at Black Hat

By Andrew Brandt I’m at the Black Hat Briefings this week, the annual confab of the best and brightest in computer security, catching up on the trends and tricks malware authors and data thieves employ. I just saw an impressive demo by a pair of security researchers who took a deep dive into the behaviors [...]

Beware Spam With HTML Attachments

By Andrew Brandt When it comes to spam messages, conventional wisdom dictates that you shouldn’t follow links or call phone numbers in the message, order products from the spammer, or open files attached to the email. We all should know by now that you should never open attached executable files, and spam filters now treat [...]

Blog Comment Spam Points to Drive-By Site

By Andrew Brandt I just want to take a moment to thank the malware author who posted a spam comment to the Webroot Threat Blog blog the other day. You guys make my job so easy. The spam comment, which reads Hello. I the beginner. I wish to show to you,scandal story and links to [...]

Ransomware App Asks Victims to Pay a Phone Bill

By Andrew Brandt Ransomware is nothing new, but a Ukrainian ransomware Trojan that came over the transom last week demonstrated that the concept of “payment” can extend to services other than banking or finance. In this case, the Trojan (which we and several other AV companies call Trojan-Ransom-Krotten) thoroughly locks down the infected system then [...]

Follow

Get every new post delivered to your Inbox.

Join 515 other followers