Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor (COFEE). Read the full article. [The Register]
A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. [The Last Watchdog]
Fraudsters have started to raid user accounts by beating strong two-factor authentication methods with Trojan-based, man-in-the-browser attacks, said Gartner Research. Read the full article. [Help Net Security]
The FBI Internet Crime Complaint Center said rogue antivirus writers have raked in $150 million from users. Read the full article. [Computerworld]
A hacker has unleashed an exploit that lets a user wrest administrative root control of a Motorola Droid smartphone. Read the full article. [Dark Reading]
Microsoft has decided to disable a 17-year-old video codec in older
versions of Windows rather than patch multiple vulnerabilities,
according to the company’s security team. Read the full article. [Computerworld]
Malware writers have revamped code that uses a popular Twitter command
to generate hard-to-predict domain names, a technique that brings
stealth to their drive-by exploits. Read the full article. [The Register]
A large scale SQL injection attack has injected a malicious iframe on
tens of thousands of susceptible websites; The
injected iframe loads malicious content from 318x.com, which eventually
leads to the installation of a rootkit-enabled variant of the Buzus
backdoor trojan. Read the full article. [Help Net Security]
A rogue anti-malware product called DefenceLab redirects infected PCs
to Microsoft’s Support portal, but modifies the HTML content as it
returns so as to appear as if Microsoft is endorsing the worthless
software. Read the full article. [The Register]
Botnets – apart from inundating out inboxes with spam – can also be
used for ulterior purposes such as executing DDoS attacks or hosting
websites, so understanding the “modus operandi” and size behind the
well-known names is a good idea; Here’s a top ten botnet list. Read the full article. [Help Net Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
