A new version of the venerable Alureon malware has appeared, and this one includes some odd behavior designed to prevent analysis and detection by antimalware systems. However, this isn’t the typical evasion algorithm, as it uses some unusual encryption and decryption routines to make life much more difficult for analysts and users whose machines have been infected.
Google has removed a group of mobile phone applications from its Android Market after it was discovered that the applications contained code that could be used to send SMS (Short Message Service) spam.
The last year or so has seen a series of high-profile targeted attacks against corporate and government networks, including the Aurora attack on Google and others, the intrusion at RSA and the recent attack on the Sony PlayStation Network. But a new report from Microsoft shows that attackers increasingly are going after consumers with highly refined phishing attacks based on social networks.
The U.S.’s Computer Emergency Response Team (CERT) issued a warning to critical infrastructure firms on Wednesday about a serious security hole in products from Massachusetts firm Iconics that could leave critical systems vulnerable to remote attacks.
Attacks targeted at users of Apples Mac OSX may be more common than previously thought, according to a post on Kaspersky Lab’s Securelist blog.
Like bank robbers, attackers tend to go where the money is and increasingly that means that they’re going after consumers. In this video, members of the Microsoft anti-malware team discuss the trend toward cybercrime rings employing sophisticated sales and marketing tactics to target consumers, as well as some of the exploit trends from recent months.
Finnish law enforcement officials arrested seventeen individuals in connection with an attack against Nordea Finland’s online banking services that took place in early 2010, according to a report from Softpedia.
In the midst of an apparent civil war, the online hacking collective, Anonymous, has issued yet another public statement denying responsibility for a damaging hack of Sony’s PlayStation Network (PSN) and claiming that Sony is trying to shift blame for “internal problems” onto Anonymous.
The source code to the infamous Zeus crimeware kit, which has been sold on underground forums for years, has been leaked and is now available for anyone to see if they know where to look.
Researchers at the French security firm VUPEN say that they have discovered several new vulnerabilities in Google Chrome that enable them to bypass the browser’s sandbox, as well as ASLR and DEP and run arbitrary code on a vulnerable machine.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
