Malware In E-Mail As Fake Invoices And E-Tickets

Sunday, July 27th, 2008

McAfee is reporting new examples of malware distributed through e-mail in the form of UPS invoices and airline e-tickets. The threats seem to be variants of a new downloader the company had reported on (Generic Downloader.ab, MTIS08-131-A). The UPS version says that your last shipment could not be delivered because the address ...

Beware Fake Malware Cleaner Programs

Sunday, July 27th, 2008

Chinese hackers are sending out malware masquerading as the Trend Micro Virus Clean Tool, according to Trend. The example in the linked Trend blog is in Chinese, so perhaps the threat is only real in China (and Taiwan). But the example is instructive.The threat arrives as an e-mail which looks ...

Fortify Your Internet Security Settings Now

Friday, July 25th, 2008

The Web became a substantially more dangerous place this week, thanks largely to the publication of instructions that show cyber criminals how to exploit a pervasive, critical flaw in the Internet infrastructure.While Internet service providers and corporations can mitigate the danger by updating the software that powers vulnerable components of ...

Get Ready For Google Gadget Malware

Friday, July 25th, 2008

"Gmalware" may be coming soon to your iGoogle page.In two weeks, at the Black Hat Conference on Wednesday, Aug. 6, Cenzic senior security analyst Tom Stracener and security researcher Robert Hansen, better known as "RSnake," plan to demonstrate a zero-day vulnerability that affects Google Gadgets."At the core of the talk ...

Reversing malware with oSpy

Friday, July 18th, 2008

Today's blog will be about a tool called oSpy, written by Andre Vadla Ravnas. oSpy is a tool which helps in reverse-engineering windows software. To demonstrate the uses of this tool and how it helps with network traffic monitoring, I have used a random malware sample from our repository. Source: http://securitylabs.websense.com/content/Blogs/3135.aspx