Spamvertised ‘Termination of your CPA license’ campaign serving client-side exploits

February 25, 2012 – 2:41 pm

By Dancho Danchev Cybercriminals are currently spamvertising ‘Termination of your CPA license‘ emails, enticing users into clicking on a malicious link supposedly redirecting to the complaint.pdf file. More details:

By ddanchev | Posted in Exploits, mal-effects, malware, spam, Threat Research | Tags: , , , , , | Leave a Comment

A peek inside the Ann Malware Loader

February 25, 2012 – 2:32 pm

By Dancho Danchev The ever-adapting cybercrime ecosystem is constantly producing new underground releases in the form of malware loaders, remote access trojans (RATs), malware cryptors, Web, IRC and P2P based command and control interfaces, all with the clear objective  to undermine current security solutions. Continuing the “A peek inside…” series, in this post I will [...]

By ddanchev | Posted in Threat Research, Keyloggers, Downloaders, malware | Tags: , , , , | Leave a Comment

Why relying on antivirus signatures is simply not enough anymore

February 23, 2012 – 10:55 am

By Dancho Danchev How is it possible that in an industry dominated by advanced performance metrics and benchmarking tests, cybercriminals still manage to release unique malware that remains undetected for weeks by major antivirus vendors? It’s pretty simple. Cybercrime is innovating much faster than the security industry is.

By ddanchev | Posted in Threat Research | Tags: , , , , , , , | Comments (5)

Report: 3,325% increase in malware targeting the Android OS

February 17, 2012 – 11:36 am

By Dancho Danchev Which is the most targeted mobile operating system? According to the recently released 2011 Mobile Threats Report from our partners at Juniper Networks, that’s the Android OS. Key summary points from the report:

By ddanchev | Posted in Android, Keyloggers, malware, Passwords, social engineering | Tags: , , , , , , , | Leave a Comment

Spamvertised “Hallmark ecard” campaign leads to malware

February 17, 2012 – 9:44 am

By Dancho Danchev Cybercriminals are currently spamvertising a “You just received a e-card form somebody” themed malware campaign, impersonating Hallmark. More details:

By ddanchev | Posted in Botnet activity, Downloaders, malware, Passwords, social engineering, spam | Tags: , , , , | Leave a Comment

Report: Internet Explorer 9 leads in socially-engineered malware protection

February 14, 2012 – 6:17 pm

By Dancho Danchev According to a newly released report from NSS Labs, Microsoft’s Internet Explorer 9 outperforms competing browsers in protecting against socially engineered malware. More details:

By ddanchev | Posted in Exploits, Firefox, Google Chrome, Internet Explorer, malware, social engineering, Threat Research | Tags: , , , , , , , | Comments (4)

Researchers intercept two client-side exploits serving malware campaigns

February 8, 2012 – 4:52 pm

By Dancho Danchev Security researchers from Webroot have intercepted two currently live client-side exploits serving malware campaigns that have already managed to infect over 20,000 PCs across the globe, primarily in the United States. Based upon detailed analysis, it can be concluded that both campaigns are launched by the same cybercriminal. More details:

By ddanchev | Posted in Downloaders, Firefox, Google Chrome, Internet Explorer, Keyloggers, malware, Passwords, Threat Research, Trojans | Tags: , , , , , , | Comments (3)

Researchers spot Citadel, a ZeuS crimeware variant

February 8, 2012 – 1:35 pm

By Dancho Danchev Security researchers from “Tracking Cyber Crime” have spotted a new ZeuS crimeware variant, that’s based on the leaked ZeuS source code from last year. Dubbed Citadel, the crimeware is positioned as a universal spyware system, whose modular nature allows cybercriminals to offer flexibly priced value-added services such as managed malware crypting, and [...]

By ddanchev | Posted in Downloaders, Keyloggers, malware, Passwords, rootkit, Threat Research, Trojans | Tags: , , , , , | Leave a Comment

A peek inside the Smoke Malware Loader

February 3, 2012 – 5:07 pm

By Dancho Danchev The competitive arms race between security vendors and malicious cybercriminals constantly produces new defensive mechanisms, next to new attack platforms and malicious tools aiming to efficiently exploit and infect as many people as possible. Continuing the “A peek inside…” series, in this post I will profile yet another malware loader. This time it’s [...]

By ddanchev | Posted in Downloaders, Keyloggers, malware, Passwords, Threat Research, Trojans | Tags: , , , , | Leave a Comment

Cybercriminals generate malicious Java applets using DIY tools

January 30, 2012 – 3:22 pm

By Dancho Danchev Who said there’s such a thing as a trusted Java applet? In situations where malicious attackers cannot directly exploit client-side vulnerabilities on the targeted host, they will turn to social engineering tricks, like legitimate-looking Java Applets, which will on the other hand silently download the malicious payload of the attacker, once the [...]

By ddanchev | Posted in Backdoors, Downloaders, Firefox, Google Chrome, Internet Explorer, Keyloggers, malware, social engineering, Stupid malware tricks, Threat Research, Trojans | Tags: , , , , , | Comments (1)
Follow

Get every new post delivered to your Inbox.

Join 546 other followers