Malware

Twitter to vet links with goal of curbing phishing attacks

Dan Kaplan March 10, 2010

Twitter on Tuesday launched a new service designed to curb phishing links delivered in the microblogging site's direct messages and email notifications.
 

India, Mexico, Brazil have most Mariposa bots

Angela Moscaritolo March 10, 2010

The Mariposa botnet infected PCs from almost every country around the world, making it one of the largest networks of compromised computers ever seen.
 

RSA Conference: Chertoff, Clarke say nation is overdue for security architecture overhaul

Dan Kaplan March 03, 2010

The status quo is not working to defend the nation's networks from sophisticated cyberespionage and warfare. Instead smarter, user-friendly solutions and more awareness is needed, while keeping an eye on civil liberties, a panel of former government officials and privacy experts said Wednesday at the RSA Conference.
 

There's no "point" to security anymore

Dave DeWalt, president and chief executive officer, McAfee March 03, 2010

We need open security, connecting all vectors and also bringing in core partners, breaking the traditional silos, says McAfee president and CEO Dave DeWalt.
 

Experts warn of fake Valentine's Day e-cards

Angela Moscaritolo February 12, 2010

Cybercriminals will no doubt, begin sending out emails over the next few days that look like Valentine's Day greeting cards, which contain a malicious link or attachment.
 

Critical Infrastructure encounters the most web malware, report

Angela Moscaritolo February 11, 2010

Companies in the energy and oil sectors experienced a 356 percent higher rate of data-theft trojans in 2009 compared to other verticals, according to Scan Safe's newly released Global Threat Report.
 

New "Bugat" trojan harvesting banking credentials

Angela Moscaritolo February 09, 2010

A new banking trojan has arrived on the scene and it uses unique features to steal login information, researchers at SecureWorks said Tuesday.
 

Zeus targeting government and military workers

Angela Moscaritolo February 09, 2010

A new campaign of the password-stealing Zeus trojan is targeting workers from government and military departments in the United States and United Kingdom, according to security researchers at Websense. The trojan is being distributed through spoofed emails claiming to come from the U.S. National Intelligence Council. The bogus messages contain subject lines such as "Report of the National Intelligence Council." The emails aim to lure users into downloading a document about the "2020 project," which actually is Zeus. — AM
 

Mozilla says two Firefox browser plug-ins contain trojan

Dan Kaplan February 08, 2010

Mozilla is advising users who may have downloaded two "experimental" Firefox add-ons that they contain malware.
 

Mass injection web hacks yield to targeted attacks

Angela Moscaritolo February 05, 2010

During the second half of 2009, attackers shifted their strategy away from mass-injection campaigns and instead focused on launching targeted attacks to infect high-profile websites, Websense found in a new report.
 

Marc Maiffret appointed chief security architect at FireEye

February 01, 2010

FireEye, maker of network security solutions, has appointed Marc Maiffret as chief security architect. Maiffret formerly served as the co-founder and CTO of eEye Digital Security. At FireEye, he will be charged with leading the development of the company╒s malware protection technology, while expanding its global security research efforts. www.fireeye.com
 

Approximately 5.5 million webpages infected in Q4 '09

Angela Moscaritolo January 26, 2010

Approximately 560,000 websites - and 5.5 million webpages on those sites - were infected with malware during the fourth quarter of 2009, according to data gathered by web anti-malware vendor Dasient. These numbers represent a decrease from Q3 of 2009, when 640,000 websites and 5.8 million webpages were infected. During Q4, however, malware infections spread to a greater number of pages on each site compared to Q3. Newly infected sites with at least 10 pages had malware on an average of 23 percent of pages, up from 19 percent in the previous quarter. — AM
 

Popularity of Apple devices draws malware, report

Greg Masters January 26, 2010

A just released annual report from Intego said it has been a busy year for Apple security.
 

Securing the network fabric versus the perimeter

Gary Kinghorn, senior product marketing manager for security products at 3Com Corproation January 25, 2010

With regards to network security and setting perimeters, what constitutes legitimate network activity?
 

StopBadware spins off as nonprofit

Greg Masters January 25, 2010

StopBadware, which began four years ago at Harvard as an anti-malware effort "to build and share knowledge through the collective efforts of a community of web users," announced it has spun off as a standalone nonprofit organization. The action was taken to reflect the group's evolution from research project to mission-driven organization. StopBadware analyzes website data and advocates for safer internet practices. Representatives from corporate partners Google, PayPal and Mozilla sit on the board and have committed initial funding. - GM
 

Haiti quake expected to lead to fraud and spread malware

Angela Moscaritolo January 13, 2010

The Haiti earthquake, believed to have killed tens of thousands, is being leveraged to do even more damage, this time in the form of internet scams.
 

Panda finds 2009 a record-breaking malware year

Angela Moscaritolo January 05, 2010

More than 40 million pieces of malware have been identified by PandaLabs and 55,000 new samples are being identified each day, many on social networking sites, the report states.
 

Waldec spreading through fake New Year's e-cards

Angela Moscaritolo December 31, 2009

The Waledac botnet is spreading spam messages that contain the subject line "Happy New Year 2010" and provide a link for what the email claims to be a New Year's greeting card.
 

IT security forecast 2010: Hope for the best and prepare for the worst

Lysa Myers, director of research, West Coast Labs December 30, 2009

Expect more of the same next year from cybercriminals as they try their craft on different platforms. But one rule still applies: If you're vulnerable, they'll find you.
 

Cameroon, China riskiest country domains, McAfee finds

Dan Kaplan December 02, 2009

A small nation in Africa is responsible for the riskiest domain space on the internet, according to new McAfee research.
 

Zeus spreading through drive-by download

Angela Moscaritolo November 30, 2009

The Zeus trojan is using a new tactic to infect users' computers, security researchers are warning.
 

Experts expect exploits abound on Cyber Monday

Angela Moscaritolo November 25, 2009

Cybercriminals have already begun to ramp up their exploits in preparation for Cyber Monday, one of the busiest online shopping days of the year.
 

Researcher finds "frighteningly bad" Adobe Flash flaw

Greg Masters November 13, 2009

A new point of entry has been discovered in Adobe Flash that allows attackers to infect any website which permits visitors to upload content, a researcher claims.
 

Gumblar site infections return, WordPress among affected

Angela Moscaritolo November 06, 2009

In the latest wave of Gumblar attacks, the backdoor script being used to infect sites has been causing some WordPress blogs and other PHP-based sites to crash, security researchers have warned.
 

Spam volume reaches new all-time high at 92 percent

Angela Moscaritolo November 03, 2009

During the third quarter of the year, spam accounted for 92 percent of all email on average, which breaks the previous record-high volume set during the second quarter of 2009.
 

New data shows website hacks continue to grow unabated

Angela Moscaritolo October 27, 2009

During the third quarter of 2009, approximately 640,000 different websites — and a total of 5.8 million pages on those sites — were infected to distribute malware, according to new data from security firm Dasient.
 

New Halloween-themed spam just the first fright

Angela Moscaritolo October 23, 2009

A Halloween-themed spam campaign is already making the rounds, and experts warn that other malicious holiday exploits are expected next week.
 

Top threats: Conficker, AutoRun, gaming trojans

Angela Moscaritolo October 09, 2009

Conficker continues to reign as a major threat, taking the top spot for the most prevalent malware detected in September, according to ESET.
 

Huge uptick in spam-borne malware since mid-September

Angela Moscaritolo October 07, 2009

The amount of the amount of spam containing malware increased ninefold during September over the previous month, according to Symantec.
 

Wave search "poisoned"

Chuck Miller September 30, 2009

Google searches on terms related to its new collaboration and communications platform, Google Wave, are leading to a rogue anti-virus programs, according to the Websense Security Labs. Users seeking information on how to sign up for Wave, which currently is by invite-only, have been victimized by manipulated search results that lead to sites designed to trick victims into paying for a security solution that doesn't work. Searches for Microsoft's new Security Essentials consumer anti-virus product also have led to "poisoned" results. — CAM