Three New Attacks Using IE Zero-Day Exploit
Three separate targeted attack campaigns in Asia have been using the IE zero-day exploit reported on two weeks ago.
Malware
Threatpost News Wrap, September 27, 2013
Mike Mimoso and Dennis Fisher look back at the news of the last couple of weeks, including some new NSA PR efforts and the Icefog cyberespionage campaign.
Time For a Change in Security Thinking, Experts Say
WASHINGTON–Security, like a lot of other things, tends to go in phases. A new attack technique is developed, vendors respond with a new defensive technology and then attackers find a way to defeat it. It has always been that way. And right now, things seem to be in one of those periodic down cycles in which the attackers have the upper hand.
Microsoft reports having discovered a click-fraud component to the Sefnit malware, thought to have disappeared in 2011. It has also linked Sefnit to the Mevade Tor botnet.
Kaspersky Lab has uncovered Icefog, a series of targeted attacks against sensitive organizations in South Korea and Japan.
The FBI began warning computer users about the Beta Bot Trojan this week, sounding the alarm about malware that has targeted a variety of online payment platforms and financial institutions over the few last months.
New watering hole attacks targeting the oil and energy sectors have been discovered. Researchers at Cisco think the attacks could be linked to similar attacks against the U.S. Department of Labor in May.
Shylock banking malware infections are up and targeting 24 major banks in particular. The malware has also added domain generation algorithm capabilities and the IPs being generated are self-signed, researchers said.
Researchers have discovered a way of getting Trojans onto integrated circuits, not by modifying the hardware, but by changing the polarity of the dopant used to make the silicon in a chip conductive.
A strain of the Revoyem ransomware redirects victims to child pornography before locking the computer and displaying a law enforcement warning demanding a fine for viewing the illegal content.
