By Yury Mashevsky (Securelist.com)
This article provides an analysis of recent developments regarding attacks launched by malicious programs against the clients of financial organizations. This article will focus primarily on the struggle for control between financial malware, also known as crimeware1, and the antivirus industry and will also examine the confrontation arising between crimeware and the financial sector as a whole.
A deceptive “help” message invites recipients to check their PCs’
compatibility with Windows 7 by downloading and running an altered
version of the Windows 7 Upgrade Advisor concealing a Trojan. Read the full article. [Help Net Security]
On the heels of a worm that
was installing backdoors on Windows systems via Yahoo Instant Messenger
comes a new worm that is even more sophisticated in its social
engineering and payload, researchers have discovered. Read the full article. [CNet]
In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read the full article. [The H Security]
This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. [Computerworld]
Foxit Corp has added new security features to its alternative PDF reader software to help thwart recent malware attacks that exploit the “/launch” feature.
A small internet service provider has been awarded nearly $2.6m in a
lawsuit it filed against a company that sent just under 25,000 spam
messages over an 18-month period. Read the full article. [The Register]
The latest of the series of Apple-related scams involves a phishing site for checking
Apple gift cards. Read the full article. [Help Net Security]
Microsoft plans to ship two bulletins next Tuesday to fix multiple remote code execution vulnerabilities in Windows, Microsoft Office and Microsoft Visual Basic for Applications.Both bulletins are rated “critical,” Microsoft’s highest severity rating. The company describes a critical flaw as one whose exploitation could allow the propagation of an Internet worm without user action.
A recent security patch from Microsoft silently fixed two severe bugs
that were never disclosed even though they posed a risk to many of its
customers, a security researcher said. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
