Multiple Chinese Espionage Campaigns Could be Linked to Central Operation
11 separate APT espionage campaigns linked to China could have connections to a centralized development and operations infrastructure.
Malware
Surveillance Backdoors ‘Contribute to Insecurity’, Report Says
The existing state of affairs in which government agencies and intelligence services work to insert backdoors into various hardware, software and networks is not only a problem in terms of civil rights but also represents a serious security risk to most users and the Internet itself, a recent report by the Citizen Lab says. And, […]
IE Zero Day Watering Hole Attack Injects Malicious Payload into Memory
A new watering hole attack is serving malware targeting an Internet Explorer vulnerability that injects its malicious payload directly into memory.
CryptoLocker ransomware infections are gaining traction and victims are at risk of losing important business or personal files to the malware which seeks out documents on a number of network resources and encrypts them.
Attackers exploiting the Microsoft Windows and Office zero day revealed yesterday are using an exploit that includes a malicious RAR file as well as a fake Office document as the lure, and are installing a wide variety of malicious components on newly infected systems. The attacks seen thus far are mainly centered in Pakistan.
Dennis Fisher talks with researcher Dragos Ruiu about his years-long struggle with a group of attackers who have infiltrated his network and are using malware that seems to resist all removal attempts and may have the ability to communicate using sound.
Microsoft is expanding its bug bounty program to open up payments of up to $100,000 to incident response teams and forensics experts who come across active attacks in the wild.
Win/32.Upatre compromises host machines through malicious email attachments and, once installed, moves to download different malware from its command and control server.
Google is panning to add a new feature to its Chrome browser that will block malicious downloads automatically, helping to prevent drive-by downloads and the kind of malware that rides along with supposedly legitimate software.
The United Nations nuclear regulatory body announced that it found malware on a number of its machines but that its networks have not been compromised.
