Was Microsoft's takedown of Citadel effective?
A posting from Naked Security: As we mentioned last week, Microsoft recently fought back against more than 1,400 Citadel botnets by sinkholing their Command and Control (C&C) infrastructure. SophosLabs has been monitoring Citadel for some time, including individual botnets such as those targeting Canadian institutions, so I decided to take a closer look at the impact of the […]
Focused Black Hat 2013 Trainings Examine Incident Response, Malware
A posting from Dark Reading In there Security management section: Verizon's 2013 DBIR indicates that 40% of breaches involved malware, and rapid analysis often falls to incident responders. Malware Analysis: Black Hat Edition provides a rapid intro to the tools and methodologies of Windows malware analysis. Attendees will learn how to observe malware's actions through disassembly and debugging, extract host […]
NYPD detective charged with hiring email hackers to break into colleagues' personal accounts
New York City police have arrested a NYPD detective for hiring an email hacking service to pinch the login details for at least 43 personal email accounts and one cell phone belonging to at least 30 individuals. Edwin Vargas, 42, of Bronxville (a part of New York City), is accused of having paid $4,050 via […]
Breakfast malware at Tiffany's? Trojan horses spammed out widely
A posting from Naked Security : Did you open your email inbox this morning to find an email like the following? Kindly open to see export License and payment invoice attached, meanwhiole we sent the balance payment yesterday. Please confirm if it has settled in your account or you can call if there is any […]
Outbreak! Fake Amazon UK emails spammed out, delivering malware
A posting from Naked Security about malware : Beware! A spate of malicious emails have been spammed out by online criminals, disguised as legitimate communications from the UK branch of online retail giant Amazon. In a widespread attack, email messages have been distributed designed to trick computer users into opening an attachment disguised as information about an order for an […]
Got Malware? Three Signs Revealed In DNS Traffic
A posting from Dark Reading about Malware and three Signs Revealed In DNS Traffic: Companies focus much of their energy on hardening computer systems against threats and stopping attempts to breach their systems' security, and rightfully so. However, companies should always assume that the attackers have already successfully compromised systems and look for the telltale signs […]
Mac malware found in malformed Word documents - is China to blame?
An posting from Naked security about Mac malware found in malformed Word documents - is China to blame: Our friends at F-Secure have blogged today about a boobytrapped Word document, that appears to be designed to infect computer systems running Mac OS X. The malicious Word file, examined by the experts in SophosLabs, claims to be about the […]
Android malware more than doubled worldwide in 2012
An article from NBC News in there Technology and posting about Security: The amount of malware aimed at infecting Android devices worldwide more than doubled last year, according to a new report from a mobile-security firm. The sheer number of pieces of malware for the Android platform rose from less than 25,000 in 2011 to more […]
Google Uses Reputation To Detect Malicious Downloads
An posting from DarkRead about Google Uses Reputation To Detect Malicious Downloads: Google researchers have combined a number of reputation techniques to create a system that is 99 percent successful in detecting and blocking malicious executables downloaded by users of its Chrome browser. The system, known as Content-Agnostic Malware Protection or CAMP, triages up to […]
Korean Mystery Malware Wiped Unix, Windows Machines
An article from Tech New Daily about a malwere wiped unix windows machines: The malware that hit South Korean banks and broadcasters yesterday (March 20) was a wrecking machine, deleting core files on both Windows and Unix-based machines and rendering them inoperable, researchers have found. Analysis by security firms AlienVault, McAfee, Sophos, Symantec and Trend […]