New trojan in mass DNS hijack

Saturday, December 6th, 2008

Researchers have identified a new trojan that can tamper with a wide array of devices on a local network, an exploit that sends them to impostor websites even if they are hardened machines that are fully patched or run non-Windows operating systems. The malware is a new variant of the DNSChanger, ...

Firefox users targeted by rare piece of malware

Thursday, December 4th, 2008

Researchers at BitDefender have discovered a new type of malicious software that collects passwords for banking sites but targets only Firefox users. The malware, which BitDefender dubbed "Trojan.PWS.ChromeInject.A" sits in Firefox's add-ons folder, said Viorel Canja, the head of BitDefender's lab. The malware runs when Firefox is started. The malware uses JavaScript ...

Rootkit unearthed in network security software

Saturday, November 29th, 2008

Researchers have unearthed rootkit-like functionality in an enterprise security product. Network security software from a Chinese developer includes processes deliberately hidden from a user and, even worse, a hidden directory, Trend Micro reports. Files in the hidden directory could exist below the radar of antivirus scanners, potentially creating a stealthy hiding ...

Christmas Lures Being Distributed Via Spam

Thursday, November 27th, 2008

Websense Security Labs ThreatSeeker Network has discovered that malware authors are already using Christmas themes this year as a social engineering tactic, in an effort to gain control over compromised machines. This campaign uses email messages in the form of e-greetings, leading to supposed animated postcards. These actually lead to ...

Gmail Security Flaw Proof of Concept

Monday, November 24th, 2008

Is it possible for someone to create a malicious filter without having access to your Gmail username and password? No, however, they can force you to create the filter without your knowledge. The blogosphere is buzzing about a Gmail Security Flaw that has caused some people to lose their domain names ...