Threat Research

Endpoint Security Webinar: Protecting your network at the sharp end

February 8th, 2012

 - I have a theory that says improving information system security–the security of our operating systems, network connections, and applications–just means the bad guys will focus more attention on our endpoints, the digital devices we use (continue reading...)

Security 101: Attack Vectors Take Advantage of User Interaction

February 8th, 2012

 - Welcome back to Security 101. Our New Year’s recess is over, and it’s time to offer another lesson.
So far we have discussed vulnerabilities and some types of low-interaction attack vectors. In this (continue reading...)

Android.Bmaster: A Million-Dollar Mobile Botnet

February 8th, 2012

 - Thanks to Eric Chien for his assistance with this research.
Introduction
We recently came across a new piece of Android malware, first highlighted by NC State’s Xuxian Jiang, and began investigating the command-and-control (C&C) servers (continue reading...)

Hey, it was a joke. No need for handcuffs.

February 8th, 2012

 - This post discusses the recent detainment of two young British tourists in Los Angeles, California who were suspected of planning terroristic and other criminal activities due to the a misunderstanding of their Twitter messages (aka (continue reading...)

Russian Spammers Eye World Content Show

February 8th, 2012

 - Thanks to Anand Muralidharan for their assistance with this research.
Televison channels across the world are set to be at the 14th International Exhibition and Forum, World Content Show, held Feb 7- 9, 2012, in Russia. (continue reading...)

Nothing Is Fair In Love and Cyber Scams

February 8th, 2012

 - Don’t let Valentine’s Day scams break your heart, and wallet
Many consumers look for a little romance on Valentine’s Day, whether it is a thoughtful gift, a romantic getaway, or a heartfelt e-card, but if you’re (continue reading...)

The Importance of Incentives in Securing the Network from the Cyber Threat

February 8th, 2012

 - The cyber security threat landscape has changed fundamentally over the last decade from “Code Red” to mass espionage and the threat of kinetic damage.  Instead of moving unsophisticated worms around the Internet, today’s adversaries are (continue reading...)

Hackers fail to extort $50,000 from Symantec, as pcAnywhere source code is published

February 8th, 2012

 - Symantec has confirmed that source code of an old version of pcAnywhere has been published on the net by hackers, as claims are made that the data thieves tried to extort $50,000 from the security (continue reading...)

Do You Have A False Sense of Cybersecurity for Mobile?

February 8th, 2012

 - Nearly three-quarters of Americans have never installed data protection applications or security software on their mobile devices to prevent data loss or defend against viruses and malware. 72% of us have unsecured smartphones, to be (continue reading...)

STOP! Are You Forwarding Jokes Or Spams?

February 8th, 2012

 - It is truly said that the world is growing smaller. And emails are one way which has helped us to communicate with our loved ones. They allow us to stay in touch with people all (continue reading...)

#2 Routers, Firewalls, & Virtualization – Top Ten Things You Didn’t Know About Nessus

February 8th, 2012

 - 
The video below is part 2 in our series of the top ten things you didn't know about Nessus and covers how Nessus scans and audits routers, firewalls, virtualization, and integrates with your patch (continue reading...)

Android Permissions: For Apps or Ads?

February 8th, 2012

 -  An Android application package (APK) can include multiple modules; one or more of these modules may be an advertisement SDK. That's pretty normal nowadays, as many Android developers currently use such modules to (continue reading...)

‘Deleted’ Facebook photos survive online three years later

February 8th, 2012

 - Over two years after the issue was first raised, Facebook has admitted that it's still working on deleting photos from legacy servers in a timely manner.

Which might mean that photos that you wanted to permanently (continue reading...)

Free Microsoft Points? Game Over, Man.

February 8th, 2012

 - There’s an Xbox code generator floating around on Youtube and other sites right now, and a pretty popular one at that. How popular?
This popular: (continue reading...)

Path and Hipster iPhone apps leak sensitive data without notification

February 7th, 2012

 - iPhone app developers Path and Hipster are in hot water after it was discovered they are sending your address book to their servers without permission.

Phishers Bank on Tax Season

February 7th, 2012

 - With the U.S. currently in tax season, online criminals have, once again, sought to take advantage of this. Robert Stetson, one of our malware researchers, spotted a phishing email posing as Intuit Inc., a (continue reading...)

Asia Pacific webcast – find out the latest twists and turns of the cybercrooks

February 7th, 2012

 - Join two of Asia Pacific's top security experts, Rob Forsyth and Paul Ducklin, as they discuss and dissect the latest Security Threat Report from SophosLabs in an Asia Pacific webcast.

The event takes place at 2pm (continue reading...)

Web Attack Ahead of Tax Season

February 7th, 2012

 - At 3 AM, on February 6, 2012, Symantec Security Response observed spam carrying malicious links which target the upcoming tax season. The spam volume spiked between 6 AM and 1 PM, identifying over 200 unique (continue reading...)

ESET Research podcast round up

February 7th, 2012

 - Here are some recently released podcasts by ESET Rearchers, addressing current topics such as the recent VeriSign hacks, the takedown of MegaUpload, and the problems with using good malware to catch the bad guys:
1. (continue reading...)

Global Cybersecurity Is Possible But Unlikely For Now

February 7th, 2012

 - It’s a sobering experience to read the Security and Defense Agenda’s (SDA) just-released report, Cybersecurity: The Vexed Question of Global Rules. The report, sponsored by McAfee, culls together interviews with 80 cyber-security experts in (continue reading...)

Copyright © 2012 The Security Blog. All rights reserved.