Malicious Botnet Stole Bank, Credit Union Credentials

Wednesday, August 6th, 2008

The researcher who first discovered a motherlode of stolen enterprise user names and passwords in June has found that nearly 9,000 of them are bank and credit-card account credentials from around the world that were grabbed by an old but crafty botnet. And it turns out the initial 50 gigabytes' ...

Massive faux-CNN spam blitz uses legit sites to deliver fake Flash

Wednesday, August 6th, 2008

More than a thousand hacked Web sites are serving up fake Flash Player software to users duped into clicking on links in mail that's part of a massive spam attack masquerading as CNN.com news notifications, security researchers said today.The bogus messages, which claim to be from the CNN.com news Web ...

Malware In E-Mail As Fake Invoices And E-Tickets

Sunday, July 27th, 2008

McAfee is reporting new examples of malware distributed through e-mail in the form of UPS invoices and airline e-tickets. The threats seem to be variants of a new downloader the company had reported on (Generic Downloader.ab, MTIS08-131-A). The UPS version says that your last shipment could not be delivered because the address ...

Beware Fake Malware Cleaner Programs

Sunday, July 27th, 2008

Chinese hackers are sending out malware masquerading as the Trend Micro Virus Clean Tool, according to Trend. The example in the linked Trend blog is in Chinese, so perhaps the threat is only real in China (and Taiwan). But the example is instructive.The threat arrives as an e-mail which looks ...

A Safer Gmail With Https

Friday, July 25th, 2008

Google added a new feature to Gmail to always use a secure (https) connection. Switch to the settings/ general tab and scroll down to “Browser connection” to see if you got it already (if not, it may still be rolled out for you). While safer, Google in their blog announcement ...