Top IT Security Bloggers

• 

  Targeted Attack Campaign Hides Behind SSL Communication

  TrendLabs - Malware Blog

  Using encrypted communication like Secure Sockets Layers (SSL) along with the clever use of recent news item as a social engineering lure is the perfect combination to penetrate and remain in a targeted entity’s infrastructure. It didn’t take long for targeted attacks to use last week’s Boston Marathon bombing as a bait to trick predetermined [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Targeted Attack Campaign Hides Behind SSL Communication

• 

  New Wave of PlugX Targets Legitimate Apps

  TrendLabs - Malware Blog

  Noted for its stealth routine, PlugX and its developers now appear to be using several legitimate applications, in particular those used by Microsoft, Lenovo, and McAfee, in an effort to remain under the radar. PLUGX variants are known for its use of normal applications to load its malicious .DLL components. This .DLL hijacking technique is [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  New Wave of PlugX Targets Legitimate Apps

• 

  (Lack of) Android Updates To Come Under FTC Scrutiny?

  TrendLabs - Malware Blog

  Last week, a rather interesting complaint was filed before the Federal Trade Commission. In a 16-page complaint, the American Civil Liberties Union described the lack of updates for many Android devices as “unfair and deceptive business practices”. The complaint went on to ask the respondents (the top four wireless carriers in the United States) to [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  (Lack of) Android Updates To Come Under FTC Scrutiny?

• 

  Another Day, Another Twitter Hack

  TrendLabs - Malware Blog

  There’s a saying in journalism: report the news, don’t be the news. Unfortunately today the Associated Press (AP) ran afoul of that rule by having their Twitter account hijacked. In good journalistic fashion, they’re telling their own story quickly and with as much facts as possible. It sounds that they saw a phishing attack against [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Another Day, Another Twitter Hack

• 

  Evasive Maneuvers: Another BKDR_VERNOT Malware Spotted

  TrendLabs - Malware Blog

  Evasion is always a goal of cybercriminals. They are not above misusing legitimate sites and services to hide malicious activities. One recent example would be BKDR_VERNOT.A, which tried to use Evernote to hide its activities. Another variant of this malware was recently spotted, but this variant uses a Japanese blogging platform as its command-and-control (C&C) [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Evasive Maneuvers: Another BKDR_VERNOT Malware Spotted

• 

  1Q Security Roundup: Zero-Days Dominate

  TrendLabs - Malware Blog

  Looking back at the first quarter of the year, the highlight – or, perhaps more appropriately, lowlight – was clear. Popular software packages like Reader/Acrobat, Flash, and Java all had to deal with multiple zero-day exploits in the month – exploits that became widely available in underground circles long before any patches were made available by the [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  1Q Security Roundup: Zero-Days Dominate

• 

  Brute-Force WordPress Attacks Affect Thousands of Sites

  TrendLabs - Malware Blog

  In the past few weeks, many WordPress blogs have been under a large-scale brute force attack. These attacks use brute-force techniques to log into WordPress dashboards and plant malicious code onto compromised blogs and websites. It’s important to note what these attacks aren’t. They are not compromising WordPress blogs using known vulnerabilities in unpatched versions; if [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Brute-Force WordPress Attacks Affect Thousands of Sites

• 

  Bitcoin In The News – And Threats

  TrendLabs - Malware Blog

  Bitcoin is still in the news, even if it’s not exactly for the right reasons. From it’s peak value of $263.798 per bitcoin on April 10, it has since fallen to just over $100. That actually represents a recovery from it’s post-peak low value of just over $50. Clearly, the market for Bitcoins is… volatile. [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Bitcoin In The News – And Threats

• 

  Cybercriminals Quickly Take Advantage of Texas Fertilizer Plant Blast, MIT Shooting

  TrendLabs - Malware Blog

  No less than a day or so after we discovered the spam campaign taking advantage of the Boston Marathon bombing, we came upon yet another spam campaign, very similar to the previous one except this time it uses the Texas fertilizer plant explosion as a lure.  The fertilizer plant explosion occurred a mere few days [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Cybercriminals Quickly Take Advantage of Texas Fertilizer Plant Blast, MIT Shooting

• 

  Fake Page With “90 Million Likes” Leads to Fake Adobe Flash

  TrendLabs - Malware Blog

  Besides the fake Facebook Profile Viewer ruse, we found another Facebook scam that lures users into downloading a fake Adobe Flash Player plugin. We noticed countless feeds pointing to a Facebook page with more than 90 million “likes”. For some, this huge number of Facebook likes may be enough for them to check the page [...]

  Post from: Trendlabs Security Intelligence Blog - by Trend Micro
  
  Fake Page With “90 Million Likes” Leads to Fake Adobe Flash