Category Archives: Targets

Targets for security threats, vulnerabilities, and attacks.

Spamvertised LinkedIn notifications serving client-side exploits and malware

March 23, 2012 – 10:14 am

By Dancho Danchev Cybercriminals are currently spamvertising LinkedIn themed messages, in an attempt to trick end and corporate users into clicking on the malicious links embedded in the emails. The campaign is using real names of LinkedIn users in an attempt to increase the authenticity of the spamvertised campaign. More details:

By ddanchev | Also posted in Downloaders, Exploits, Keyloggers, malware, Rogue Security Products, social networks, spam, Threat Research, Trojans | Comments (5)

Rogue APKs continue to find new homes

March 22, 2012 – 2:32 pm

by Armando Orozco We’ve been tracking rogue premium-sms Android apps for sometime now. Here’s an interesting site we came across offering a download of the Google Music application, but this one comes with a cost. This site serves up a premium-sms Trojan of the ransom variety. Targeting Russian speakers these Rogue’s, we call Android.FakeInst, offer [...]

By Armando Orozco | Also posted in Android, Trojans | Comments (1)

Spamvertised ‘Temporary Limit Access To Your Account’ emails lead to Citi phishing emails

March 8, 2012 – 11:18 am

By Dancho Danchev Cybercriminals are currently spamvertising a fraudulent email campaign impersonating Citi, using ‘Temporary Limit Access To Your Account‘ themed emails as a social engineering attempt to trick end users into clicking on the link found in the phishing emails. More details:

By ddanchev | Also posted in Passwords, social engineering, spam | Comments (5)

Evolution of Android Malware “The touch, the feel of being tricked into sending premium SMS messages, the worst feeling of our lives” (Part 3)

March 6, 2012 – 12:34 pm

by Nathan Collier Android.SMS.FakeInst is a Trojan that aims to do one thing — trick users into sending premium SMS messages by pretending to be an install for an app.  Here’s how the scam works: The user sends three premium SMS messages in exchange for an app, but there is no guarantee that it will [...]

By Lisa Bongiovanni | Also posted in Android, Mobile security, Threat Research | Leave a Comment

An Evolution of Android Malware “When stealing data isn’t enough meet…GoManag …“ (Part 2)

February 29, 2012 – 5:36 pm

by Nathan Collier In our continued series of how Android malware authors continue adding functionality to their work we take a look at GoManag. First seen last year, targeting Chinese speakers, GoManag is a Trojan that installs as a service so it can run in the background, collects device information and downloads payloads.  Its odd [...]

By Armando Orozco | Also posted in Android, Mobile security, Uncategorized | Comments (2)

How cybercriminals monetize malware-infected hosts

February 27, 2012 – 8:30 pm

By Dancho Danchev The vibrant cybercrime underground ecosystem offers countless ways to monetize the malware-infected hosts at the disposal of the malicious attacker. From converting them to anonymization proxies assisting cybercriminals in covering their Web activities, to launching DDoS attacks, and using them to disseminate spam and more malicious threats, cybercriminals have a vast arsenal [...]

By ddanchev | Also posted in social networks | Leave a Comment

An Evolution of Android Malware “My How You’ve Grown PJAPPS!” (Part 1)

February 17, 2012 – 3:44 pm

By Nathan Collier We’ve all seen software grow.  We watch as our favorite software adds on new features and becomes better at what it does.  Malware writers are no different, they want their software to have more features as well as steal even more information. PJApps is a good example of this. PJApps is a [...]

By Armando Orozco | Also posted in Android, Backdoors, Deep Knowledge, malware, Mobile security, Trojans | Comments (5)

Report: 3,325% increase in malware targeting the Android OS

February 17, 2012 – 11:36 am

By Dancho Danchev Which is the most targeted mobile operating system? According to the recently released 2011 Mobile Threats Report from our partners at Juniper Networks, that’s the Android OS. Key summary points from the report:

By ddanchev | Also posted in Android, Keyloggers, malware, Passwords, social engineering | Comments (5)

Spamvertised “Hallmark ecard” campaign leads to malware

February 17, 2012 – 9:44 am

By Dancho Danchev Cybercriminals are currently spamvertising a “You just received a e-card form somebody” themed malware campaign, impersonating Hallmark. More details:

By ddanchev | Also posted in Botnet activity, Downloaders, malware, Passwords, social engineering, spam | Leave a Comment

Twitter adds HTTPS support by default

February 15, 2012 – 1:37 pm

By Dancho Danchev On Monday, Twitter announced that it’s introducing support for secure HTTPS connections to all users by default. More details:

By ddanchev | Also posted in social networks | Comments (1)
Follow

Get every new post delivered to your Inbox.

Join 609 other followers