Fraudsters have started to raid user accounts by beating strong two-factor authentication methods with Trojan-based, man-in-the-browser attacks, said Gartner Research. Read the full article. [Help Net Security]
The FBI Internet Crime Complaint Center said rogue antivirus writers have raked in $150 million from users. Read the full article. [Computerworld]
A hacker has unleashed an exploit that lets a user wrest administrative root control of a Motorola Droid smartphone. Read the full article. [Dark Reading]
Microsoft has decided to disable a 17-year-old video codec in older
versions of Windows rather than patch multiple vulnerabilities,
according to the company’s security team. Read the full article. [Computerworld]
Malware writers have revamped code that uses a popular Twitter command
to generate hard-to-predict domain names, a technique that brings
stealth to their drive-by exploits. Read the full article. [The Register]
A pair of new kernel vulnerabilities are threatening the security of systems running current versions of several Linux distributions. One of the flaws gives a remote attacker the ability to crash vulnerable systems and the other leads to root privileges for a local attacker.
A large scale SQL injection attack has injected a malicious iframe on
tens of thousands of susceptible websites; The
injected iframe loads malicious content from 318x.com, which eventually
leads to the installation of a rootkit-enabled variant of the Buzus
backdoor trojan. Read the full article. [Help Net Security]
A rogue anti-malware product called DefenceLab redirects infected PCs
to Microsoft’s Support portal, but modifies the HTML content as it
returns so as to appear as if Microsoft is endorsing the worthless
software. Read the full article. [The Register]
Botnets – apart from inundating out inboxes with spam – can also be
used for ulterior purposes such as executing DDoS attacks or hosting
websites, so understanding the “modus operandi” and size behind the
well-known names is a good idea; Here’s a top ten botnet list. Read the full article. [Help Net Security]
Notre Dame University, who originally discovered a data breach back in early November 2009, said 24,000 NDU employees were affected. Read the full article. [The Observer]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
