Malware Piggybacks On Anti-Phishing Software
Malware authors have discovered a shortcut to create a Trojan horse program: using components from an anti-phishing product from China-based Zhuhai Kingsoft Software.
Malware
WordPress Hit by Second Massive Attack in Two Days
The main WordPress.com site was the target of a major DDoS attack yesterday that knocked the popular blogging platform offline for a couple of hours, and another attack that hit the site again Friday morning. The service is back online now, but the attacks may be an indication that the service could be collateral damage in some politically motivated attacks against WordPress blogs.
Analysis Shows DroidDream Trojan Designed for Future Monetization
A detailed analysis of the DroidDream Trojan that was found in dozens of apps in the Android Market this week shows that the malware has a modular construction that likely was designed to give attackers the ability to monetize infected devices through installations of adware or spyware.
By Ted Julian, Yankee Group Security researchers today pulled more than 20 apps in the Official Android Market after they were found to have been infected with the DroidDream malware. Analysis of the DroidDream malware suggests that it can gather sensitive data like a mobile device’s IMEI (International Mobile Equipment Identity) number and user ID, break out of Android’s application security sandbox and download additional code. Sounds pretty scary, huh? Sure, but to grizzled security pros, it’s a story that’s also sadly familiar – and a sign of what’s to come in the mobile devices market.
The Android Market incident that surfaced Wednesday in which Google was forced to pull more than 20 apps that had been Trojaned is the latest piece of evidence that the mobile app store model is broken and is setting users up for failure.
UPDATED: A New Hampshire man has pleaded guilty in Federal Court to charges of conspiracy to commit computer fraud and failure to file income taxes stemming from a scam forcing telephone modems to call premium service numbers without their owner’s consent.
A large number of apps in the Android Market have been found to contain a piece of malware known as DroidDream, a Trojan that not only is able to harvest sensitive data from an infected device, but also can break out of the Android sandbox and download additional malicious code to the phone from remote servers.
While most consumers worry about their credit card or debit card numbers or other valuable data being stolen from their home computers or leaked via a data breach at their banks, a new report shows that the vast majority of attacks that harvest this sensitive data actually target weak software on point-of-sale devices at retail locations.
Researchers have found a new piece of malware that’s designed to attack the Mac OS X platform, an occurrence that’s rare enough still that each new discovery is noted separately.
One of the premiere forums used by cyber criminals has been breached and a database of over 2,000 members leaked, according to reports from the Russian Website Lifenews.
