Sunday, September 4th, 2011
Keep in mind that today's DNS hacks of popular websites such as acer.com, ups.com, theregister.co.uk were just that. A DNS hack. The actual sites themselves have not been compromised. For example:
UPS.com was altered to point to ups.com.85621INNSns1.yumurtakabugu.com
The attackers only changed the NS records for the website. This could have been much worse.
References:
http://isc.sans.edu/diary.html?storyid=11503&rss
http://nakedsecurity.sophos.com/2011/09/04/dns-hack-hits-popular-websites-telegraph-register-ups-etc/
Posted in Internet, Privacy, Security | No Comments
Thursday, August 25th, 2011
Researchers have uncovered evidence that the infamous Zeus login-stealing Trojan has been blended with the Ramnit worm to create hybrid malware that can attack online bank accounts while spreading across networks.
Security company Trusteer said it recently discovered a mutant version of Ramnit that appeared to be using a man-in-the-browser (MitB) ...
Posted in Internet, Privacy, Security | No Comments
Saturday, January 29th, 2011
Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities. Microsoft ...
Posted in Internet, Privacy, Security, Windows | No Comments
Tuesday, November 30th, 2010
Malware is all about money. Spyware stealthily captures keystrokes and sensitive data to compromise accounts. Phishing attacks lure users into unwittingly surrendering account credentials and other crucial information. Ransomware uses a much less subtle tactic of demanding the money directly in exchange for the safe return of your own data.
The ...
Posted in Internet, Security | No Comments
Sunday, November 28th, 2010
Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand hacking but don't use Metasploit every day. If you want to learn Metasploit and grow ...
Posted in Internet, Networking, Privacy, Security, Software | No Comments
