Rogue Security Products « Webroot Threat Blog

Mass SQL injection attack affects over 200,000 URLs

January 5, 2012 – 3:41 pm

by Dancho Danchev Security researchers from the Internet Storm Center, have intercepted a currently ongoing SQL injection attack, that has already affected over 200,000 URLs. The attack was originally detected in early December, 2011. It currently affects ASP sites and Coldfusion, as well as all versions of MSSQL.

By ddanchev | Posted in Exploits, Threat Research, Uncategorized, Website owners | Tags: ASP site, coldfusion, Lizamoon, MSSQL, noscript, Rogue Security Products, scareware, SQL Injection attack, vulnerable websites | Comments (4)

Top 7 Cybersecurity Predictions for 2012

November 17, 2011 – 3:00 am

By Mel Morris From Stuxnet to Sony, a number of cyberattacks emerged in 2011 that experts have predicted for quite some time. I predict 2012 will be even more pivotal, thrusting cybersecurity into the spotlight. These are my top seven forecasts for the year ahead: 1) Targeted, zero-day attacks will be the norm. Looking back [...]

By Lisa Bongiovanni | Posted in Deep Knowledge, Internet security industry, Mobile security, Threat Research | Tags: 2012 predicition, Android, blacklist, cloud, rogue antivirus, Rogue Security Products, sony breach, Stuxnet, zero day | Comments (5)

Fake UPS Document Installs Fake Microsoft Patch Payload

June 17, 2011 – 8:12 am

By Andrew Brandt As if we didn’t have enough to deal with this week — after a Microsoft patch Tuesday that brought with it a boatload of security updates for Windows, Office, Silverlight, Visual Studio, and other programs — some enterprising malware distributor is emailing around bogus tracking number malware dressed up in the icon [...]

By mguthrie09 | Posted in Backdoors, Botnet activity, Downloaders, hijack search results, Keyloggers, Rogue Security Products, social engineering, spam, Stupid malware tricks, Threat Research | Tags: 153 James Street, 153 James Street Suite 100 Long Beach CA 90000, 90000, And it will arrive within 3 buisness days., clickcareful.org, findsmell.org, findstation.org, Hiloti, Long Beach CA, miliardov.com, Paymentsadd.com, pusk3.exe, Rogue Security Products, searchbreeze.org, SpyEye, Suite 100, svchost.exe, The parcel was sent to your home adress., Trojan-Downloader-Tukpat, trol.exe, trol2.exe, UPS_Document.exe, UPS_document.zip, variantov.com, Windows Recovery, Windows XP Restore | Comments (1)

Malware Load Points Raise the Complexity Bar

June 9, 2011 – 9:09 am

By Andrew Brandt When malware ends up on an infected machine, one of the first things it will do is to ensure that it will start up again after the victim reboots their computer. For a criminal it makes sense. After all, what good is malware that stops working after a reboot? In Windows, there [...]

By mguthrie09 | Posted in Ad-clickers, Botnet activity, Firefox, hijack search results, Internet Explorer, Rogue Security Products, Search engines, Stupid malware tricks, Threat Research, Trojans | Tags: %appdata%, auto-start locations, Batserv, conima.exe, HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows, HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\software\classes\exefile\shell\open\command, HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\firefox.exe\shell\open\command, HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\iexplore.exe\shell\open\command, HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run, load points, Local Account Authority Service, LocalAccountAuthority.bat, lssas.exe, manager.exe, rogue antivirus, Rogue Security Products, Run Key, start points, Trojan-Clicker-Batserv, Windows auto-start locations, windows load points, Windows start points, Wireshark Antivirus | Comments (4)

MacProtector: Rogue of the Week

May 27, 2011 – 6:00 pm

By Andrew Brandt This week, we turn our attention temporarily away from the never-ending stream of rogue security products on the Windows platform and take a closer look at the Mac OS analogue, MacProtector (aka Mac Security, Mac Defender, MacGuard, and–if history serves–soon to be many, many other names). There’s been a lot of press [...]

By mguthrie09 | Posted in Advanced Malware Removal, Rogue Security Products, social engineering, Stupid malware tricks, Threat Research | Tags: 86.55.210.102, 91.213.217.30, avRunner.app, buy-viagra-now.net, gay.porn.com, Mac Defender, Mac Guard, Mac Protector, Mac Security, MacProtector, Macs don't get viruses, Rogue Security Products, You are purchasing MAC Security | Leave a Comment

New Year’s Drive-By Brings a Recursive Rogue

January 6, 2011 – 9:28 am

By Andrew Brandt On the morning of January 2nd, still bleary eyed, I checked my email to find a charming notification informing me that I’d received an electronic greeting card. Yay! I thought to myself: The first targeted malware of 2011 plopped right into my lap. I immediately pulled up my research machine, browsed to [...]

By mguthrie09 | Posted in Backdoors, Downloaders, hijack search results, Rogue Security Products, social engineering, spam, Stupid malware tricks, Threat Research, Uncategorized | Tags: AdobeUpdate .exe, Antivirus Scan, Buying this version you obtain an ultimate protection, err.log, Karagany, powerfull, rogue antivirus, Rogue Security Products, Since this day you can feel safe, Standart edition, Trojan-Downloader-Karagany | Leave a Comment

10 Threats from 2010 We’d Prefer Remain History

January 1, 2011 – 3:32 pm

By Andrew Brandt With 2010 finally behind us, and an unknown number of cyberattacks likely to come in the new year, I thought I’d run down a brief list of the malicious campaigns criminals pulled off last year that I’d really dread to see anyone repeat. Now that they’re in the past, they should stay [...]

By mguthrie09 | Posted in Backdoors, Blackhat SEO, Botnet activity, Destructive behavior, Enterprises, Firefox, Gaming threats, Internet Explorer, Keyloggers, Online shopping threats, Passwords, phishing, Phishing Trojans, Rogue Security Products, social engineering, social networks, spam, Stupid malware tricks, Threat Research, Trojans, Website owners | Tags: .cc, .in, Adobe updater, Aurora, BHSEO, black hat SEO, ccTLD, China, Cocos (Keeling) Islands, Exploit-PDF, Fake PDF, Firefox, Firefox update, Flash update, India, Koobface, Oficla, Operation Aurora, rogue antivirus, Rogue Security Products, Sasfis, SEO, Stuxnet, Tacticlol, Trojan-Downloader-Tacticlol, Windows Update | Comments (1)

New Rogue Is Actually Five Rogues in One

September 16, 2010 – 1:32 pm

By Andrew Brandt For years, the makers of those snake oil security programs we call Rogue Security Products have spent considerable effort making up new names, developing unique graphic design standards, and inventing backstories for their utterly useless, expensive scam products. Now a new rogue has taken this never ending shell game one step further, [...]

By mguthrie09 | Posted in Blackhat SEO, Internet security industry, Ransomware, Rogue Security Products, Search engines, social engineering, Stupid malware tricks, Threat Research | Tags: $99.90, AntiSpy Safeguard, Continue unprotected, firewall, Install heuristic module, Major Defense Kit, Microsoft Security Essentials, Peak Protection, Peak Protection 2010, Pest Detector, Red Cross Antivirus, Required heuristics module, Rogue Security Products | Comments (4)

This PC Will Self-Destruct in Ten Seconds

April 8, 2010 – 9:38 am

By Andrew Brandt Phishing Trojans that try to remain below the radar are still prevalent, but a number of files coming through Threat Research point to a disturbing trend: Several new variants of existing malware families are taking a scorched earth approach to infected computers, rendering the PC unbootable (just check out the batch file [...]

By mguthrie09 | Posted in Destructive behavior, Phishing Trojans, Rogue Security Products, Stupid malware tricks, Threat Research | Tags: facebook, Facebook Password Reset Confirmation NR., Please print out the invoice copy attached, Rogue Security Products, UPS, UPS Delivery Problem NR., XP Defender, You can find your new password in attached document | Comments (10)

Fakealerts Invade Google Image Search Results for ’24′ Star

January 27, 2010 – 5:10 pm

By Andrew Brandt Searchers beware: Those photos of celebrities or funny cat pictures that turn up in your Google image search results might not be photos at all, but fake antivirus alerts. Evidence appears to indicate that a similar scam to one we blogged about last November may be working its way up the Google [...]

By mguthrie09 | Posted in Blackhat SEO, Rogue Security Products, social engineering, Stupid malware tricks | Tags: 24, Annie Wersching, fake antivirus, fakealert, Rogue Security Products, security tool, Spyware.IEMonster, total security, what a tool | Comments (8)

Follow

Follow “Webroot Threat Blog”

Powered by WordPress.com