Top IT Security Bloggers

• 

  Detecting Hidden Administrator Apps on Your Mobile Device

  TrendLabs - Malware Blog

  Last week, we talked about the OBAD Android malware, which installed itself as an administrator on the device and used a vulnerability in Android to hide this fact from the user. One effect of this particular behavior was to make removal of this threat very difficult. Apps that have set themselves up as administrators require [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Detecting Hidden Administrator Apps on Your Mobile Device

• 

  Oracle Improves Java Security – What It Means For End Users

  TrendLabs - Malware Blog

  About two weeks ago, Oracle published a blog post describing – and promising – to improve the security of Java. Since then, I’ve been asked a few times: what exactly did they say, and what does it mean for end users? First, Oracle talked about how they’re now handling security patches. They pointed out how [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Oracle Improves Java Security – What It Means For End Users

• 

  Vulnerability Disclosure – Open or Private?

  TrendLabs - Malware Blog

  At the end of May, two Google security engineers announced Mountain View’s new policy regarding zero-day bugs and disclosure. They strongly suggested that information about zero-day exploits currently in the wild should be released no more than seven days after the vendor has been notified. Ideally, the notification or patch should come from the vendor, [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Vulnerability Disclosure – Open or Private?

• 

  Malware Redirects South Korean Users To Phishing Sites

  TrendLabs - Malware Blog

  Online banking threats have been prevalent for many years, but recently they seem to be determined to expand beyond their usual targets. In the past few weeks and months, we’ve seen various attacks target Korean banks using various techniques. The latest attack we’ve found uses a Trojan that redirects users of various Korean banks to [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Malware Redirects South Korean Users To Phishing Sites

• 

  Cybercriminals Improve Android Malware Stealth Routines with OBAD

  TrendLabs - Malware Blog

  We have been seeing apps that exploit vulnerabilities in Android, with most of them attempting to gain higher privileges on user devices. In recent days, a stronger and a far more advanced Android malware named ANDROIDOS_OBAD has come into play. What seems to be a product from the same malware authors behind ANDROIDOS_JIFAKE, ANDROIDOS_OBAD is [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Cybercriminals Improve Android Malware Stealth Routines with OBAD

• 

  Anonymous’ #OpPetrol: What is it, What to Expect, Why Care?

  TrendLabs - Malware Blog

  Last month, the hacker collective Anonymous announced their intention to launch cyber attacks against the petroleum industry (under the code name #OpPetrol) that is expected to last up to June 20. Their claimed reason for this attack is primarily due to petroleum being sold with the US dollar instead of currency of the country where [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Anonymous’ #OpPetrol: What is it, What to Expect, Why Care?

• 

  RARSTONE Found In Targeted Attacks

  TrendLabs - Malware Blog

  Earlier in February we blogged about RARSTONE, a Remote Access Tool (RAT) that we discovered having some similar characteristics to PlugX, an older and more well-known RAT. In April, the same malware family used the Boston Marathon bombing as part of its social engineering bait. Since then, we’ve been looking out for further attacks using RARSTONE. We’ve [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  RARSTONE Found In Targeted Attacks

• 

  Two-Factor Authentication: Something To Consider

  TrendLabs - Malware Blog

  The past few weeks have seen some very high-profile sites adopt two-factor authentication in one form or another. First was Twitter, followed soon by Evernote and Linkedin. For users of these sites, these represent a welcome improvement to their security. In the event that their password is (somehow) compromised, an attacker faces another barrier before [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Two-Factor Authentication: Something To Consider

• 

  Light June 2013 Patch Tuesday is No Reason to Slack

  TrendLabs - Malware Blog

  Microsoft releases five security bulletins for June 2013, which is relatively light compared to previous ones. Despite this, users must update their systems immediately, to avoid possible web threats leveraging software vulnerabilities. This roster of security fixes include updates for vulnerabilities found in Windows and Internet Explorer, which were rated Critical. This means that IT [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Light June 2013 Patch Tuesday is No Reason to Slack

• 

  GAMARUE Uses Sourceforge to Host Files

  TrendLabs - Malware Blog

  In our monitoring of the GAMARUE malware family, we found a variant that used the online code repository SourceForge to host malicious files. This finding is the latest development we’ve seen since the increase in infection counts observed last month. SourceForge is a leading code repository for many open-source projects, which gives developers a free [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  GAMARUE Uses Sourceforge to Host Files