2010 October « Webroot Threat Blog

Monthly Archives: October 2010

Game Trojans’ Biggest Tricks in 2010

October 22, 2010 – 1:22 pm

By Andrew Brandt and Curtis Fechner It’s appropriate that this year’s Blizzcon, the two-day celebration of all things World of Warcraft, takes place during National Cyber Security Awareness Month. No other game is as heavily targeted by thieves as WoW, so we thought this would be as good a time as any to run down [...]

By mguthrie09 | Posted in Botnet activity, Destructive behavior, Downloaders, Gaming threats, Keyloggers, phishing, Phishing Trojans, social engineering, Stupid malware tricks, Threat Research | Tags: Activision, blizzard, blizzcon, Game phishers, National Cyber Security Awareness Month, Trojan-PWS-Cashcab, Trojan-PWS-IMEsneak, TRxCF, World of Warcraft, WoW | Comments (1)

WoW Patch Brings Out the Malware Trolls

October 20, 2010 – 10:42 am

By Andrew Brandt Last week, Activision/Blizzard released a long-anticipated patch for its immensely popular game, World of Warcraft. While I don’t play this game, a number of our Threat Researchers do, and they’ve been on the lookout for shenanigans. Curtis Fechner found a doozy. The update comprises a major overhaul of many core systems within [...]

By mguthrie09 | Posted in Gaming threats, phishing, Phishing Trojans, social engineering, Stupid malware tricks, Threat Research, Trojans | Tags: 4.0.1 patch, configuring, DllDog, LUA files, RatingBuster, ratingbuster.org, rbv1.4.9.exe, Trojan-PWS-DllDog, TRxCF, WhiteTooth, World of Warcraft, WoW, Xiamen ChinaSource Internet Service Co. | Comments (2)

Hey Malware Guy: Just What the Heck Am I Supposed to Do With This?

October 19, 2010 – 11:43 am

By Andrew Brandt The Tacticlol downloader, responsible for a lot of infections over the past year, propagates in two ways: via drive-by downloads, and as a .zip archive attached to messages. Maybe the spam filtering companies finally caught on to the trick, or maybe the Tacticlol distributors are just trying to mix it up, but [...]

By mguthrie09 | Posted in Botnet activity, Downloaders, social engineering, spam, Stupid malware tricks, Threat Research | Tags: глупо номер один, holbrook.jpg, Label_UPS_Nr###.exe, Label_UPS_Nr343.exe, Tacticlol, Trojan-Downloader-Tacticlol, UPS | Leave a Comment

Your Federal Tax Payment Has Not Been Rejected

October 13, 2010 – 4:26 pm

By Andrew Brandt It’s been more than a week since we started seeing spam email, supposedly sent by the EFTPS (Electronic Federal Tax Payment System, a division of the US Department of the Treasury), informing recipients in dire, bolded text that Your Federal Tax Payment ID: 01037513 has been rejected. I had hoped it would [...]

By mguthrie09 | Posted in social engineering, spam, Stupid malware tricks, Threat Research | Tags: EFTPS, eftpsid0353546.com, In other way forward information to your accountant adviser, Return Reason Code R21, spam, Spamglish, Your Federal Tax Payment, Your Federal Tax Payment ID: 01037513 has been rejected | Comments (3)

Patchy Phisher Forces Firefox to Forego Forgetting Passwords

October 6, 2010 – 3:47 pm

By Andrew Brandt Every browser can, at the user’s discretion, be set up to remember passwords. In general, Webroot advises most users not to set the browser to store login credentials, because they’re so easily extracted by password-stealing Trojans like Zbot. In Firefox, for example, you can click Tools, Options, then open the Security tab, [...]

By mguthrie09 | Posted in Backdoors, Firefox, Internet Explorer, Keyloggers, phishing, Phishing Trojans, Stupid malware tricks, Threat Research | Tags: Firefox, Karaj, kernel.exe, Maestro, msinet.ocx, nsLoginManagerPrompter.js, Salar Zeynali, SaLiXeM, TRxZW, باشگاه کیسه دوش گرفتن | Comments (21)

Five Reasons You Should Always “Stop. Think. Connect.”

October 4, 2010 – 9:27 am

By Andrew Brandt Today’s the official kickoff for National Cyber Security Awareness Month, and the organizations supporting the event, including the National Cyber Security Alliance, the Anti-Phishing Working Group, and dozens of corporate citizens including Webroot, want you to protect your computer and your personal information. So they’ve come up with a three word campaign [...]

By mguthrie09 | Posted in adware, Blackhat SEO, Botnet activity, Destructive behavior, Firefox, Gaming threats, Internet Explorer, Keyloggers, malware, Online shopping threats, Passwords, phishing, Rogue Security Products, Search engines, social engineering, social networks, spam, Stupid malware tricks, Trojans, Website owners | Tags: Stop. Think. Connect | Comments (18)

Follow

Follow “Webroot Threat Blog”

Powered by WordPress.com