Category Archives: malware

All forms of software that act with malicious intent

Spamvertised Verizon-themed ‘Your Bill Is Now Available’ emails lead to ZeuS crimeware

March 29, 2012 – 11:16 am

By Dancho Danchev Cybercriminals newest spamvertised malware campaign is brand-jacking Verizon Wireless in an attempt to trick end users into clicking on the malicious links embedded in the email. More details:

By ddanchev | Also posted in Downloaders, Exploits, Keyloggers, Passwords, spam, Threat Research, Trojans | Comments (1)

Tens of thousands of web sites affected in ongoing mass SQL injection attack

March 26, 2012 – 9:07 am

By Dancho Danchev Hundreds of thousands of legitimate web sites are currently affected in a a mass SQL injection attack that has been ongoing for the past several months. The ongoing mass SQL injection attacks, are directly related to last year’s scareware-serving Lizamoon mass SQL injection attacks. The cybercriminals behind it, are automatically exploiting the [...]

By ddanchev | Also posted in Blackhat SEO, mal-effects, Threat Research | Comments (5)

Spamvertised LinkedIn notifications serving client-side exploits and malware

March 23, 2012 – 10:14 am

By Dancho Danchev Cybercriminals are currently spamvertising LinkedIn themed messages, in an attempt to trick end and corporate users into clicking on the malicious links embedded in the emails. The campaign is using real names of LinkedIn users in an attempt to increase the authenticity of the spamvertised campaign. More details:

By ddanchev | Also posted in Downloaders, Exploits, Keyloggers, Rogue Security Products, social networks, spam, Threat Research, Trojans | Comments (5)

Malicious USPS-themed emails circulating in the wild

March 23, 2012 – 3:00 am

By Dancho Danchev Cybercriminals are currently spamvertising malicious USPS-themed emails, that entice end and corporate users into clicking on malicious links found in the emails. More details:

By ddanchev | Also posted in Downloaders, Exploits, Keyloggers, spam, Threat Research, Trojans | Comments (3)

Rogue APKs continue to find new homes

March 22, 2012 – 2:32 pm

by Armando Orozco We’ve been tracking rogue premium-sms Android apps for sometime now. Here’s an interesting site we came across offering a download of the Google Music application, but this one comes with a cost. This site serves up a premium-sms Trojan of the ransom variety. Targeting Russian speakers these Rogue’s, we call Android.FakeInst, offer [...]

By Armando Orozco | Also posted in Android, Trojans | Comments (1)

Spamvertised ‘Your tax return appeal is declined’ emails serving client-side exploits and malware

March 22, 2012 – 9:13 am

By Dancho Danchev Cybercriminals are currently spamvertising with IRS (Internal Revenue Service) themed emails, enticing end and corporate users into downloading and viewing a malicious .htm attachment. More details:

By ddanchev | Also posted in Downloaders, Keyloggers, mal-effects, social engineering, Threat Research, Trojans | Comments (2)

Trojan Downloaders actively utilizing Dropbox for malware distribution

March 21, 2012 – 9:14 am

By Curtis Fechner It’s never surprising to see the multitude of tactics a cybercriminal will use to deliver malware. In this case, I came across a collection of files masquerading as RealNetworks updater executables. These files were all located in a user’s %AppData%\real\update_ob\ directory, and the sizes were all quite consistent. At first glance there [...]

By Curtis | Also posted in Deep Knowledge, Downloaders, Smart Malware Tricks, Threat Research, Trojans | Comments (3)

Spamvertised ‘Your accountant license can be revoked’ emails lead to client-side exploits and malware

March 9, 2012 – 12:20 pm

By Dancho Danchev Cybercriminals are currently spamvertising a malicious email campaign that’s designed to trick you into clicking on a bogus complaint.pdf link which ultimately leads to client-side exploits and malware. The campaign is launched by the same gang that launched the “Spamvertised ‘Termination of your CPA license’ ” malicious campaign last month. More details:

By ddanchev | Also posted in Downloaders, Exploits, Keyloggers, social engineering, spam, Threat Research, Trojans | Comments (3)

A peek inside the Darkness (Optima) DDoS Bot

March 8, 2012 – 12:09 pm

By Dancho Danchev With politically motivated DDoS (distributed denial of service attack) attacks proliferating along with the overall increase in the supply of managed “DDoS for hire” services, it’s time to get back the basics, and find out just what makes an average DDoS bot used by cybercriminals successful. Continuing the “A peek inside…” series, in this [...]

By ddanchev | Also posted in Downloaders, Keyloggers, Threat Research, Trojans | Comments (2)

New service converts malware-infected hosts into anonymization proxies

March 2, 2012 – 4:57 pm

By Dancho Danchev What happens when a host gets infected with malware? On the majority of occasions, cybercriminals will use it as a launch platform for numerous malicious activities, such as spamming, launching DDoS attacks, harvesting for fresh emails, and account logins. But most interestingly, thanks to the support offered in multiple malware loaders, they will [...]

By ddanchev | Also posted in Threat Research | Leave a Comment
Follow

Get every new post delivered to your Inbox.

Join 609 other followers