China « Webroot Threat Blog

Brazilian “Winehouse” Trojan Sends Hotmail, Bank Passwords to China

July 29, 2011 – 11:18 am

By Andrew Brandt Late Monday, after news about the death of troubled pop singer Amy Winehouse had been circling the globe for a little more than 48 hours, we saw the first malware appear that used the singer’s name as a social engineering trick to entice victims to run the malicious file. Abusing celebrity names, [...]

By mguthrie09 | Posted in Botnet activity, phishing, Phishing Trojans, social engineering, spam, Stupid malware tricks, Threat Research | Tags: 103684policia-inglesa-divulga-fotos-do-corpo-da-cantora-amy-winehouse-WVA.exe, American Express, Amex, Amy Winehouse, arquivos, bank phishers, China, China Education and Research Network Center, China Telecom, chinese phishers, Guangdong Mobile, Hotmail, Live.com, Microsoft, MSN, phishers, phishing, Policía Nacional de Colombia, policia.gov.co, Trojan-Phisher-SABanks.gen, w32.phisher.sabanks | Comments (3)

10 Threats from 2010 We’d Prefer Remain History

January 1, 2011 – 3:32 pm

By Andrew Brandt With 2010 finally behind us, and an unknown number of cyberattacks likely to come in the new year, I thought I’d run down a brief list of the malicious campaigns criminals pulled off last year that I’d really dread to see anyone repeat. Now that they’re in the past, they should stay [...]

By mguthrie09 | Posted in Enterprises, Stupid malware tricks, Threat Research, Firefox, Phishing Trojans, Keyloggers, Rogue Security Products, Gaming threats, social networks, social engineering, Passwords, Online shopping threats, spam, phishing, Blackhat SEO, Destructive behavior, Trojans, Website owners, Internet Explorer, Backdoors, Botnet activity | Tags: .cc, .in, Adobe updater, Aurora, BHSEO, black hat SEO, ccTLD, China, Cocos (Keeling) Islands, Exploit-PDF, Fake PDF, Firefox, Firefox update, Flash update, India, Koobface, Oficla, Operation Aurora, rogue antivirus, Rogue Security Products, Sasfis, SEO, Stuxnet, Tacticlol, Trojan-Downloader-Tacticlol, Windows Update | Comments (1)

Chinese Phishers Get On the Fake Codec Bandwagon

June 28, 2010 – 3:19 pm

By Andrew Brandt Malware distributors in China have started pushing the same kinds of fake codec scams on unsuspecting Chinese Web surfers that criminals elsewhere in the world have mastered. I’m not sure how I feel about this. On the one hand, I feel sorry for the Chinese victims, most of whom are probably blissfully [...]

By mguthrie09 | Posted in Downloaders, Gaming threats, social engineering, Stupid malware tricks | Tags: AV专用播放器.exe, baidu.google.sina.yaszas, China, fake codec, ICBC, Intermediate Belt Video and Music, movie_setup_889.exe, QVOD player, setup321.exe, Sino-cybercrime, Yeepay, 免费看毛片_10_954467.msi, 免费成人播放器.exe, 对接强奸犯 | Comments (1)

Trojan Decodes Captchas Using Stolen Commercial Tools

October 2, 2009 – 12:38 pm

By Andrew Brandt A new Trojan quietly circulating in the wild uses components from a commercial optical character recognition (OCR) application to decode captchas, those jumbled-text images meant to help a website discern human activity from automated bots. The OCR-using captcha breaking tool is just one component of the Trojan. Its main purpose appears to [...]

By mguthrie09 | Posted in adware, Keyloggers, Phishing Trojans, Stupid malware tricks, Threat Research | Tags: Advanced Captcha Recognition Engine, captcha, China, Internet security, spyware, TOCR, Transym, trojan, Trojan-PWS-Lanci | Comments (4)

Follow

Follow “Webroot Threat Blog”

Powered by WordPress.com