The notorious information-stealing Zeus trojan is currently spreading via drive-by download. Those behind Zeus, or Zbot, recently began circulating spam claiming to
come from the Internal Revenue Service (IRS), requesting users submit a
“tax refund request form” by clicking on a link that is provided. Read the full article. [SC Magazine]
A researcher has published an explanation of a new flaw in FreeBSD that allows an attacker to take control of a vulnerable machine. The vulnerability could give an attacker root access to the FreeBSD machine, and the FreeBSD developers have published a patch for the flaw early Tuesday.
There is an ongoing attack against some WordPress implementations that is trying to brute-force the passwords for the administrator accounts on the installations. The attack is being driven by an automated PHP script that tries thousands of possible passwords.
Security experts are warning of a new malicious spam campaign with a Trojan Horse designed to harvest the log-in credentials of online gamers with sexually explicit images of Asian women. Read the full article. [SC Magazine]
The IDG News Service is reporting that Microsoft’s latest round of security patches appears to be causing some PCs to seize up and display a black screen, rendering the computer useless. The problem affects Microsoft products including Windows 7, Vista and XP operating systems.
Researchers have released code that can compromise
Microsoft’s Internet Explorer browser, but the software is not as
reliable as first thought. Read the full article. [Computerworld]
Using Internet Explorer and a virtual PDF generator to print a PDF file
from a HTML page causes the document’s entire storage path, for example
file://C:UsersdabDownloadsdocument.pdf, to be stored in the document itself. Read the full article. [The H Security]
After several years in forced exile, the venerable L0phtcrack password-auditing tool made its return to the scene earlier this year.
The latest malware spam email requests users to click on Flash download and install the “flashinstaller.exe,” but it has banking trojan behind it. Read the full article. [HelpNet Security]
Dennis Fisher talks with Steve Lipner of Microsoft about the Security Development Lifecycle, changes in the threat modeling process and the security of Windows 7.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
