Kelihos Relying on CBL Blacklists to Evaluate New Bots
The Kelihos botnet is leveraging legitimate security services such as composite blocking lists (CBLs) to test the reliability of victim IP addresses before using them to push spam and malware.
Malware
Updated Drive/DirtJumper DDoS Toolkit Includes Mitigation Bypasses
Drive, a variant of the DirtJumper DDoS toolkit, has been updated with mitigation bypass capabilities.
APT Groups Using G20 Summit as Lure in Targeted Attacks
A spate of known cyberespionage groups have been using the G20 Summit as a lure for new waves of attacks, and security researchers say one of the groups is likely the same one that was responsible for the attack on the New York Times earlier this year.
A new Trojan has been discovered that goes to great lengths to bypass Craigslist’s controls in order to post spam messages on the site.
Researchers have spotted the Poison Ivy RAT being used in three new attacks with ties to China.
Spammy websites distributing adware as Java or other kinds of software updates are nothing new but researchers have recently noticed two sites pushing that malware to users through sites that leverage Google’s App Engine.
Old malware tricks never really die, they just get recycled and passed down to the next generation of attackers. The latest technique to get run through the wayback machine is the use of the right-to-left override character in Unicode, a tactic that enables malware authors to hide the real name of a malicious executable or, in a recent case, a registry key.
Researchers have discovered a number of a malicious Android apps are using Google’s Cloud Messaging service and leveraging it as a command and control server to carry out attacks.
The Counter.php strain of malware has been spotted in the past redirecting users to a handful of malicious sites and now appears to be leveraging that ability to send victims to websites serving up the Styx exploit kit.
Updated versions of Aumlib and Ixeshe malware have been found in new targeted APT-style attack campaigns against targets in Asia.
