SecurityFeed.info » Malicious Code

« Expand/Collapse

Malicious Code (10 unread)

February 28, 2009
2:38
For Love or Money—Social Engineering by W32.Ackantta.B@mm
» ‎ Malicious Code

Over the past two days, Security Response has observed an increase in detections of W32.Ackantta.B@mm and subsequently, Trojan.Vundo.
February 24, 2009
0:02
Downadup—Advanced Crypto Protection
» ‎ Malicious Code

The conclusion of my previous blog posed an interesting question to readers: “...seeing as the list of the future domains was publicly disclosed on the Web, why hadn’t any other cyber criminals taken advantage of the predictions?” Antivirus companies and many independent security researchers were able to crack the domain prediction algorithm used by the worm, so it is reasonable to believe that other people were able to achieve the same result, but with different intentions.
0:02
Downadup—Advanced Crypto Protection
» ‎ Malicious Code

The conclusion of my previous blog posed an interesting question to readers: “...seeing as the list of the future domains was publicly disclosed on the Web, why hadn’t any other cyber criminals taken advantage of the predictions?” Antivirus companies and many independent security researchers were able to crack the domain prediction algorithm used by the worm, so it is reasonable to believe that other people were able to achieve the same result, but with different intentions.
February 23, 2009
19:28
A New Downadup Variant?
» ‎ Malicious Code

Over the last few days many reports have emerged concerning a new variant of Downadup (a.k.a. Conficker), which has been dubbed Downadup.B++ or Conficker.C. While one could categorize Downadup into three variants (or even more), Symantec products will detect all known variants of Downadup as either Downadup.A or Downadup.B.
19:28
A New Downadup Variant?
» ‎ Malicious Code

Over the last few days many reports have emerged concerning a new variant of Downadup (a.k.a. Conficker), which has been dubbed Downadup.B++ or Conficker.C. While one could categorize Downadup into three variants (or even more), Symantec products will detect all known variants of Downadup as either Downadup.A or Downadup.B.
February 19, 2009
13:06
MBR Rootkit paper from VB2008
» ‎ Malicious Code

Back in 2008, the infamous MBR rootkit (a.k.a. Mebroot or Sinowal) proved to be one of the most complicated pieces of malicious code ever seen. Clearly written by professional developers, the Mebroot rootkit has pushed stealth technologies to an extreme level in order to support a bigger criminal project.
13:06
MBR Rootkit paper from VB2008
» ‎ Malicious Code

Back in 2008, the infamous MBR rootkit (a.k.a. Mebroot or Sinowal) proved to be one of the most complicated pieces of malicious code ever seen. Clearly written by professional developers, the Mebroot rootkit has pushed stealth technologies to an extreme level in order to support a bigger criminal project.
February 18, 2009
21:22
Downadup: Locking Itself Out
» ‎ Malicious Code

While Downadup’s RPC exploit method of spreading has been highlighted in several recently posted blog articles, the worm spreads via other methods as well. One of the potentially more noticeable methods is through network shares, especially in enterprise environments.
21:22
Downadup: Locking Itself Out
» ‎ Malicious Code

While Downadup’s RPC exploit method of spreading has been highlighted in several recently posted blog articles, the worm spreads via other methods as well. One of the potentially more noticeable methods is through network shares, especially in enterprise environments.
February 16, 2009
12:40
W32.Virut.CF—Collateral Damage
» ‎ Malicious Code

Polymorphic file-infectors have been around for a long time, with possibly the first one surfacing in 1990. This has proven to be an effective technique that malicious code authors have employed to give their code a better chance of survival in the wild. Since this type of threat showed up there has been a struggle between security vendors and malware writers.

← Vulnerabilities & Exploits Security Risks →

SecurityFeed.info » Malicious Code

Feeds

Malicious Code (10 unread)