Malware RSS Feed

Blog: Hello from Infiltrate 2013

Malware Alerts - Fri, 04/12/2013 - 13:51
Today is the second and last day of Infiltrate 2013 which is taking place in Miami Beach. It's my first time at Infiltrate and so far I've been really impressed with the quality of the conference.

Blog: Winnti-Stolen Digital Certificates Re-Used in Current Watering Hole Attacks on Tibetan and Uyghur Groups

Malware Alerts - Thu, 04/11/2013 - 20:31

A new-ish Flash exploit is on the loose for attack around the web. This time, the attackers have compromised a caregiver site providing support for Tibetan refugee children and are spreading malware signed with Winnti stolen certificates with Flash exploits.

Blog: Winnti-Stolen Digital Certificates Used in Orphan Tibetan Refugee Children Caregivers Attack

Malware Alerts - Thu, 04/11/2013 - 20:31

A new-ish Flash exploit is on the loose for attack around the web. This time, the attackers have compromised a caregiver site providing support for Tibetan refugee children and are spreading malware signed with Winnti stolen certificates with Flash exploits.

Blog: Orphan Tibetan Refugee Children Caregivers under Attack

Malware Alerts - Thu, 04/11/2013 - 20:31

A new-ish Flash exploit is on the loose for attack around the web. This time, the attackers have compromised a caregiver site providing support for Tibetan refugee children and are spreading malware signed with Winnti stolen certificates with Flash exploits.

Blog: The Winnti honeypot - luring intruders

Malware Alerts - Thu, 04/11/2013 - 09:23
During our research on the Winnti group we have managed to discovered quite a considerable amount of Winnti samples targeting different gaming companies. With the help ofUsing thisat sophisticatedcomplicated malicious program cybercriminals gained remote access to infected workstations and then carried out further they activityed manually.

Blog: Winnti FAQ. More than just a game

Malware Alerts - Thu, 04/11/2013 - 09:21
Today Kaspersky Lab's team of experts published a detailed research report that analyzes a sustained cyberespionage campaign conducted by the cybercriminal organization known as Winnti.

Analysis: Winnti. More than just a game

Malware Alerts - Thu, 04/11/2013 - 08:30
The study shed light on the activities of a group that has persistently targeted online gaming companies for several years.

Analysis: Winnti 1.0 technical analysis

Malware Alerts - Thu, 04/11/2013 - 08:28
The favorite tool of the attackers has been malicious program we called "Winnti". It has evolved since the first use, but we divide all variants into two generations: 1.x and 2.x. Our publication describes 1.0 variant of this tool.

Blog: Microsoft Updates April 2013 - 3 Critical Vulnerabilities

Malware Alerts - Tue, 04/09/2013 - 14:23
Microsoft released two Bulletins this month patching 3 critical vulnerabilities. Along with these immediate issues, they released five other rated "Important". It appears that the two Bulletins address use-after-free vulnerabilities that can all be attacked through Internet Explorer.

Blog: Absent-minded spammers

Malware Alerts - Tue, 04/09/2013 - 09:42

Change that password!

SANS Tip-of-the-Day - Fri, 04/05/2013 - 23:57

Pages

Subscribe to RIT Information Security aggregator