Stormy April Fool’s Day

Monday, March 31st, 2008

A wave of April Fool's Day related Storm mails have just been sent out. Similar as the other times with a link that points to an IP address.

Massive IFRAME SEO Poisoning Attack Continuing

Friday, March 28th, 2008

Last week's massive IFRAME injection attack is slowly turning into a what looks like a large scale web application vulnerabilities audit of high profile sites. Following the timely news coverage, Symantec's rating for the attack as medium risk, StopBadware commenting on XP Antivirus 2008, and US-CERT issuing a warning about ...

Guarding the guardians: A story of PGP key ring theft

Thursday, March 27th, 2008

A couple of weeks ago, we received a CHM, or Windows Help file, embedded in e-mail as part of a targeted attack campaign against an NGO. Virus detection was near zero. On Virustotal.com, two solutions actually flagged it as malicious. After decompiling the CHM file, which you can easily do using tools ...

Researchers Discover Rootkit Variation

Thursday, March 27th, 2008

While there might not be new malicious threats under the sun, there are plenty of new ways to spin old virus attacks. Trend Micro researchers discovered last weekend a new variation of a MBR rootkit released in the wild, which contains new technology to prevent detection. When combined with Web ...

Anatomy of a hack attack

Sunday, March 16th, 2008

Monday, 9am Blackjack, a hacker working from an internet cafe in London, is about to launch an attack on a major government agency. His aim is to cause maximum disruption and embarrassment. And, according to security experts, his job is going to be worryingly easy. "Most organisations have dozens of vulnerabilities they ...