2012 February « Webroot Threat Blog

Monthly Archives: February 2012

An Evolution of Android Malware “When stealing data isn’t enough meet…GoManag …“ (Part 2)

February 29, 2012 – 5:36 pm

by Nathan Collier In our continued series of how Android malware authors continue adding functionality to their work we take a look at GoManag. First seen last year, targeting Chinese speakers, GoManag is a Trojan that installs as a service so it can run in the background, collects device information and downloads payloads. Its odd [...]

By Armando Orozco | Posted in Android, Mobile security, Uncategorized | Tags: Android, GoMang | Comments (2)

BlackHole exploit kits gets updated with new features

February 29, 2012 – 1:57 pm

By Dancho Danchev According to independent sources, the author of the most popular web malware exploitation kit currently dominating the threat landscape, has recently issued yet another update to the latest version of the kit v1.2.2. More details:

By ddanchev | Posted in Botnet activity, Downloaders, Exploits, Keyloggers, malware, rootkit, Threat Research, Trojans | Tags: BlackHole Exploit Kit, cybercrime, Malicious Software, malware, security | Comments (1)

A peek inside the Elite Malware Loader

February 29, 2012 – 1:40 pm

By Dancho Danchev Just like today’s modern economy, in the cybercrime ecosystem supply, too, meets demand on a regular basis. With malware coding for hire propositions increasing thanks to the expanding pool of talented programmers looking for ways to enter the cybercrime ecosystem, it shouldn’t be surprising that cybercriminals are constantly releasing new malware loaders, [...]

By ddanchev | Posted in Downloaders, Keyloggers, malware, rootkit, Threat Research, Trojans | Tags: cybercrime, Elite Malware Loader, Malicious Software, malware, Malware Loader, security | Leave a Comment

How cybercriminals monetize malware-infected hosts

February 27, 2012 – 8:30 pm

By Dancho Danchev The vibrant cybercrime underground ecosystem offers countless ways to monetize the malware-infected hosts at the disposal of the malicious attacker. From converting them to anonymization proxies assisting cybercriminals in covering their Web activities, to launching DDoS attacks, and using them to disseminate spam and more malicious threats, cybercriminals have a vast arsenal [...]

By ddanchev | Posted in social networks | Tags: cybercrime, facebook, Malicious Software, malware, Marketing, Marketing Campaign, security, twitter, YouTube | Leave a Comment

Spamvertised ‘Termination of your CPA license’ campaign serving client-side exploits

February 25, 2012 – 2:41 pm

By Dancho Danchev Cybercriminals are currently spamvertising ‘Termination of your CPA license‘ emails, enticing users into clicking on a malicious link supposedly redirecting to the complaint.pdf file. More details:

By ddanchev | Posted in Exploits, mal-effects, malware, spam, Threat Research | Tags: Botnets, cybercrime, Malicious Software, malware, security, Spam Campaign | Comments (1)

A peek inside the Ann Malware Loader

February 25, 2012 – 2:32 pm

By Dancho Danchev The ever-adapting cybercrime ecosystem is constantly producing new underground releases in the form of malware loaders, remote access trojans (RATs), malware cryptors, Web, IRC and P2P based command and control interfaces, all with the clear objective to undermine current security solutions. Continuing the “A peek inside…” series, in this post I will [...]

By ddanchev | Posted in Downloaders, Keyloggers, malware, Threat Research | Tags: cybercrime, Malicious Software, malware, Malware Loader, security | Leave a Comment

Researchers intercept malvertising campaign using Yahoo’s ad network

February 25, 2012 – 2:26 pm

By Dancho Danchev Security researchers from StopMalvertising.com have intercepted a malvertising campaign using Yahoo’s ad network, that ultimately leads to a malicious payload in the form of fake security software known as scareware. More details:

By ddanchev | Posted in hijack search results, mal-effects, malware, Rogue Security Products, Smart Malware Tricks | Tags: Fake Security Software, Malvertising, scareware, security, Yahoo | Leave a Comment

Why relying on antivirus signatures is simply not enough anymore

February 23, 2012 – 10:55 am

By Dancho Danchev How is it possible that in an industry dominated by advanced performance metrics and benchmarking tests, cybercriminals still manage to release unique malware that remains undetected for weeks by major antivirus vendors? It’s pretty simple. Cybercrime is innovating much faster than the security industry is.

By ddanchev | Posted in Threat Research | Tags: antivirus, cybercrime, Malicious Software, malware, security, Security Industry, Security Metrics, Security Solutions | Comments (7)

An Evolution of Android Malware “My How You’ve Grown PJAPPS!” (Part 1)

February 17, 2012 – 3:44 pm

By Nathan Collier We’ve all seen software grow. We watch as our favorite software adds on new features and becomes better at what it does. Malware writers are no different, they want their software to have more features as well as steal even more information. PJApps is a good example of this. PJApps is a [...]

By Armando Orozco | Posted in Android, Backdoors, Deep Knowledge, malware, Mobile security, Trojans | Tags: Android permissions, android tracking, PJApps, sms, SyncMyPix | Comments (5)

Report: 3,325% increase in malware targeting the Android OS

February 17, 2012 – 11:36 am

By Dancho Danchev Which is the most targeted mobile operating system? According to the recently released 2011 Mobile Threats Report from our partners at Juniper Networks, that’s the Android OS. Key summary points from the report:

By ddanchev | Posted in Android, Keyloggers, malware, Passwords, social engineering | Tags: Android, Fake Installers, iOS, Malicious Software, malware, Security; Mobile Malware, SMS Trojans, Symbian | Comments (5)

Webroot Threat Blog

Monthly Archives: February 2012

An Evolution of Android Malware “When stealing data isn’t enough meet…GoManag …“ (Part 2)

BlackHole exploit kits gets updated with new features

A peek inside the Elite Malware Loader

Spamvertised ‘Termination of your CPA license’ campaign serving client-side exploits

A peek inside the Ann Malware Loader

Researchers intercept malvertising campaign using Yahoo’s ad network

Why relying on antivirus signatures is simply not enough anymore

An Evolution of Android Malware “My How You’ve Grown PJAPPS!” (Part 1)

« Home

Pages

Categories

Archives

INSIGHTS INTO THREATS AND TRENDS FROM OUR INTERNET SECURITY EXPERTS

Archives

Referral Program

Free tools

Connect with us!

Subscribe by email

Send Us Feedback

Blogroll

Privacy

Navigation

topnav1

topnav2

topnav3

topnav4

Site Meter

RSS

Follow “Webroot Threat Blog”