With a key election in Iran looming on Friday, Google officials say they have seen a major uptick in the volume of phishing attacks against users in Iran, possibly coming from the same group that was using fake Google certificates to attack Iranian targets in 2011 after the compromise of DigiNotar.
The Washington Free Beacon’s website has been attacked and malware is redirecting visitors to a site hosting the ZeroAccess rootkit and scareware.
Calling it the company’s “most aggressive” botnet operation operation to date, Microsoft provided details early Wednesday evening regarding a massive disruption of the Citadel botnet.
Researchers say the prevalence of peer-to-peer botnets has grown fivefold during the past 12 months with virulent malware such as ZeroAccess leading the way.
Kaspersky Lab researchers discover a new espionage malware campaign called NetTraveler, which is likely written by the same group in China responsible for Gh0st RAT and Titan Rain.
A team of researchers examined the resiliency of peer-to-peer botnets and mitigation tactics that could help with takedowns.
Beta Bot, a new banking Trojan, has been refined with new infection capabilities and features that enable it to avoid detection by security software.
Calling it a paradigm shift, university researchers were able to trigger mobile-device malware using a modest amount of music, lighting, magnetic fields or sound vibrations.
The news that the attack on Google in 2009 also compromised a database holding warrants for lawful intercept surveillance on users has raised fears about the security of national security data on private networks. Cyberspionage operations pose a serious threat to national security, and these attacks are increasing. Dennis Fisher spoke with Anup Ghosh of Invincea about the nature of the threat and what can be done to address it.
The Sunshop targeted espionage malware campaign re-uses the Lady Boyle malware and a number of recently patched exploits, including one for IE 8 used in the Department of Labor watering hole attack.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
