The notorious information-stealing Zeus trojan is currently spreading via drive-by download. Those behind Zeus, or Zbot, recently began circulating spam claiming to
come from the Internal Revenue Service (IRS), requesting users submit a
“tax refund request form” by clicking on a link that is provided. Read the full article. [SC Magazine]
There is an ongoing attack against some WordPress implementations that is trying to brute-force the passwords for the administrator accounts on the installations. The attack is being driven by an automated PHP script that tries thousands of possible passwords.
Security experts are warning of a new malicious spam campaign with a Trojan Horse designed to harvest the log-in credentials of online gamers with sexually explicit images of Asian women. Read the full article. [SC Magazine]
Over the course of a few days in February 2000, a lone hacker was able to bring some of the Web’s larger sites to their knees, using just a few dozen machines and some relatively primitive software to cripple Yahoo, eBay, E*trade, Amazon, ZDnet and others for hours at a time. No one knew it at the time, but these attacks would come to be seen in later years as some of the earlier outbreaks of what has become a massive online pandemic.Jose Nazario on Botnets and the History of DDoS AttacksDennis Fisher talks with Jose Nazario of Arbor Networks
about the Mafiaboy attacks, the history of DDoS attacks and the botnet
epidemic.
Researchers have released code that can compromise
Microsoft’s Internet Explorer browser, but the software is not as
reliable as first thought. Read the full article. [Computerworld]
Using Internet Explorer and a virtual PDF generator to print a PDF file
from a HTML page causes the document’s entire storage path, for example
file://C:UsersdabDownloadsdocument.pdf, to be stored in the document itself. Read the full article. [The H Security]
The latest malware spam email requests users to click on Flash download and install the “flashinstaller.exe,” but it has banking trojan behind it. Read the full article. [HelpNet Security]
Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. [Washington Post]
Facebook administrators have blocked a clickjacking exploit that
displayed images of a scantily clad woman on profile pages without
first prompting the user for permission. Read the full article. [The Register]
VMware has advised of a total of 93 vulnerabilities in several of its products, including ESX Server, Server, VirtualCenter and vCenter. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
