Top IT Security Bloggers

• 

  Watering Holes and Zero-Day Attacks

  TrendLabs - Malware Blog

  The term “Watering Hole” has become a popular way to describe targeted malware attacks in which the attackers compromise a legitimate website and insert a “drive-by” exploit in order to compromise the website’s visitors. Two recent papers by our friends at RSA and Symantec documented such attacks. Of course, such attacks are not new. This [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Watering Holes and Zero-Day Attacks

• 

  PE_XPAJ: Persistent File Infector

  TrendLabs - Malware Blog

  We’re currently investigating several file infectors that have affected several countries particularly Australia. Trend Micro detect these as PE_XPAJ.C, PE_XPAJ.C-1, PE_XPAJ.C-2, and PE_XPAJ.C-O. Based on our initial analysis, these PE_XPAJ variants connect to the following C&C servers to send and receive information: {BLOCKED}.{BLOCKED}.162.208:35516 {BLOCKED}.{BLOCKED}.152.218:35516 {BLOCKED}.{BLOCKED}.71.249:35516 {BLOCKED}.{BLOCKED}.60.108:35516 {BLOCKED}.{BLOCKED}.123.153:35516 {BLOCKED}.{BLOCKED}.132.25:35516 {BLOCKED}.{BLOCKED}.16.5:389 {BLOCKED}.{BLOCKED}.0.1:1056 {BLOCKED}.{BLOCKED}.16.9 {BLOCKED}.{BLOCKED}.16.10 {BLOCKED}.{BLOCKED}.183.224:35516 {BLOCKED}.{BLOCKED}.0.1:1070 {BLOCKED}.{BLOCKED}.16.12:389 [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  PE_XPAJ: Persistent File Infector

• 

  Perils of the Popular

  TrendLabs - Malware Blog

  As we’ve seen in the case of PCs, social engineering schemes and cybercriminal activities ride on what’s popular. This quarter, we saw how the threat landscape put a price on popularity. We have observed a sixfold increase in the number of Android malware as the sales of Android-based devices rise. There are now almost 175,000 [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Perils of the Popular

• 

  Weak Passwords Leave Users Vulnerable to PE_MUSTAN.A

  TrendLabs - Malware Blog

  Seen in the wild last July 2012, PE_MUSTAN.A spreads around less secured networks and is known to target systems with weak passwords. Its roots can be traced from WORM_MORTO.SM that proliferated a year before. While this tactic of brute forcing its way around the network is not new anymore, PE_MUSTAN’s presence proves that supposed secured [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Weak Passwords Leave Users Vulnerable to PE_MUSTAN.A

• 

  Keep Your Children Safe Online

  TrendLabs - Malware Blog

  It’s a parent’s responsibility to ensure that wherever their children are, they remain safe, happy and secure. The Internet, in this respect, is no different than any other playground in the park or at school. It looks harmless, even magical at first glance, but could result in some spills and tears if kids are left [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Keep Your Children Safe Online

• 

  Mini Flame Ignites a Flicker but Is No Wildfire

  TrendLabs - Malware Blog

  “Mini Flame”, detected by Trend Micro as BKDR_FLAMER.SMA is the latest espionage tool to hit the threat landscape. But a closer look reveals that BKDR_FLAMER.SMA does not differ largely from malicious tools like PlugX and PoisonIvy. Because of its similarities to the Flame malware, this new tool was dubbed “mini flame”. Flame made headlines early [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Mini Flame Ignites a Flicker but Is No Wildfire

• 

  Spoofed WebEx, PayPal Emails Lead to Rogue Flash Update

  TrendLabs - Malware Blog

  Without verifying its legitimacy, users who may be anticipating a WebEx conference are at risk of downloading variants of a notorious info stealing malware. Last week, we received two spoofed emails that redirect users to a fake Adobe Flash Player update. These messages use different approaches to lure users into downloading the malicious file update_flash_player.exe [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Spoofed WebEx, PayPal Emails Lead to Rogue Flash Update

• 

  The DORKBOT Rises

  TrendLabs - Malware Blog

  DORKBOT, also known as NgrBot, is not a new threat. In fact, it was seen in the wild as early as 2011. Yet last week, DORKBOT made the news for spreading via Skype spammed messages, and has now reached than 17,500 reported infections globally. So what is DORKBOT, really? A worm with multiple propagation routines [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  The DORKBOT Rises

• 

  Malicious Developers Released Rogue Bad Piggies Versions

  TrendLabs - Malware Blog

  It’s a pig-eat-pig world out there – at least on the mobile app threat front. Right after reports of malicious Bad Piggies on Google Chrome webstore circulated, we found that certain developers also released their own, albeit rogue versions of the said gaming app. On the heels of Bad Piggies‘ launch last month, we saw [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Malicious Developers Released Rogue Bad Piggies Versions

• 

  US Banks Targeted By Fraud Campaign

  TrendLabs - Malware Blog

  Recent reports have stated that a massive campaign of fraud is planned to hit various US banks. Approximately 100 cybercriminals are said to be part of this planned campaign. It is believed that this attack will be launched using newly-developed malware related to the Gozi banking Trojan, which has been called Gozi-Prinimalka. Overall, the capabilities [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  US Banks Targeted By Fraud Campaign