Peer-to-Peer Botnets Resilient to Takedown Attempts
A team of researchers examined the resiliency of peer-to-peer botnets and mitigation tactics that could help with takedowns.
Malware
New Beta Bot Trojan Skilled at Attacking Banks, ECommerce Platforms
Beta Bot, a new banking Trojan, has been refined with new infection capabilities and features that enable it to avoid detection by security software.
Researchers Use Music, Light to Trigger Mobile Malware
Calling it a paradigm shift, university researchers were able to trigger mobile-device malware using a modest amount of music, lighting, magnetic fields or sound vibrations.
The news that the attack on Google in 2009 also compromised a database holding warrants for lawful intercept surveillance on users has raised fears about the security of national security data on private networks. Cyberspionage operations pose a serious threat to national security, and these attacks are increasing. Dennis Fisher spoke with Anup Ghosh of Invincea about the nature of the threat and what can be done to address it.
The Sunshop targeted espionage malware campaign re-uses the Lady Boyle malware and a number of recently patched exploits, including one for IE 8 used in the Department of Labor watering hole attack.
A new variant of Citadel malware is making the rounds that are targeting Payza, a money transfer service popular all over the world, especially in developing nations that are under-serviced when it comes to online banking access.
The developers of Reveton have expanded that ransomware’s repertoire with a password stealing functionality, according to Stefan Sellmer at the Microsoft Malware Protection Center.
Microsoft observed a precipitous drop-off in click-traffic on their “extended publishing network,” which they claim reflects a similar drop-off in click-fraud, as a result of the actions they have taken to stymie ZeroAccess, according to Microsoft Malware Protection Center researchers Tommy Blizard and Nikola Livic.
The Safe cyberespionage campaign includes elements of malware and coding from a professional cybercrime software development team.
Researchers at Seculert discover that the PushDo malware gang has counter-punched a research report by Dell SecureWorks and Damballa outing its use of a domain generation algorithm and has adjusted the DGA to generate just .KZ domains.
