Project Honey Pot Hits 1 Billionth Spam Mark
Stats from the one billion spam messages blocked by Project Honey Pot over the last five years provide an insight into junk mail trends and spamming practices. Read the full article. [The Register]
Malware
Hackers Using XSS to Insert iFrames in New Attack
In a new twist on a couple of old attack techniques, hackers have begun using cross-site scripting to inject malicious iFrames onto some Web sites, redirecting users to malicious sites designed to install unwanted software.
Open-Source DB PostgreSQL Patched
The PostgreSQL Project developers have announced the release of security updates for their popular open source object-relational database. Read the full article. [The H Security]
A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. [eWEEK Europe]
Attackers are targeting new, unpatched flaws in both Adobe Acrobat and Adobe Reader. The vulnerabilities exist in the most recent versions of the applications and are under active attack, according to Adobe.
There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. [TechTarget]
Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor (COFEE). Read the full article. [The Register]
A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. [The Last Watchdog]
Fraudsters have started to raid user accounts by beating strong two-factor authentication methods with Trojan-based, man-in-the-browser attacks, said Gartner Research. Read the full article. [Help Net Security]
The FBI Internet Crime Complaint Center said rogue antivirus writers have raked in $150 million from users. Read the full article. [Computerworld]
