Content Tagged ‘Symantec Security Response’

Social Network Attacks Surge

June 29, 2011 - Exploiting the popularity of social networks for the purposes of distributing spam, malware, and phishing attacks is quite a common technique these days. Spam attacks via social networks grew dramatically between April and June 2011. Over this period, we monitored (continue reading...) Read more

Inside a Back Door Attack

June 29, 2011 - A colleague of mine recently wrote about one of the June “Microsoft Tuesday” vulnerabilities being exploited in the wild. Because we're a bit like that, we decided to allow the exploit to compromise one of our honeypot computers so (continue reading...) Read more

MBR Confusion

June 29, 2011 - Our friends at Microsoft recently blogged about a new variant of a bootkit Trojan from the family they call Popureb. The variant, Win32/Popureb.E, introduced a driver component to prevent a malicious master boot record (MBR) and other malicious components (continue reading...) Read more

New Symantec Research: The Current State of Mobile Device Security

June 27, 2011 - The mass adoption of both consumer and managed mobile devices in the enterprise has increased employee productivity, but has also exposed the enterprise to new security risks. Our latest research is a deep dive into the current state of mobile (continue reading...) Read more

News Links That 419 Scammers Have Used The Most

June 23, 2011 - When scammers try to gain sympathy from the email readers or to entice them with huge amount of money, they will usually mention a tragedy or, any event that attracted huge public attention. They may also want the users to (continue reading...) Read more

Improving Passwords

June 20, 2011 - Troy Hunt, a Microsoft MVP, has done some terrific analysis of the passwords people use. Unfortunately, what has made this possible is the recent trend in hacktivism whereby it is common for hackivists to post the spoils of their attacks (continue reading...) Read more

A Retrospective "TOuR" of Backdoor.Bifrose

June 20, 2011 - Backdoor.Bifrose first came to our attention in 2004. It is a remote administration backdoor tool that allows unauthorized access to a compromised computer. Once installed, the malware has a range of capabilities, including:  running processes, opening windows, opening a (continue reading...) Read more

Bitcoin Infostealer Falls Prey to W32.Induc.A

June 19, 2011 - The case about the Bitcoin Infostealer is getting funny: we blogged about a business analysis on Bitcoin Mining, and we also blogged about malware designed to steal bitcoins from unsuspecting users (Infostealer.Coinbit). Now we have found two (continue reading...) Read more

The Last Horcrux Brings More Spam

June 17, 2011 - Harry Potter and the Deathly Hallows - Part 2 is the last movie of Harry Potter novel series and is being released globally on July 15. The movie has another few weeks before it appears in theaters and it has (continue reading...) Read more

Spammers Offering Fake Gifts for Father’s Day

June 17, 2011 - This year, Father’s Day will be celebrated on June 19th. Of course, this is an occasion that is used to express feelings towards dads for all of their love and support, often accompanied by the giving of exclusive gifts. Sadly, (continue reading...) Read more

Exploit for June MS Tuesday Vulnerability in the Wild

June 17, 2011 - Symantec Security Response has confirmed that the Microsoft Internet Explorer Time Element Uninitialized Memory Remote Code Execution Vulnerability is being exploited in the wild. The vulnerability affects Internet Explorer versions 6, 7, and 8; however, the exploit we have (continue reading...) Read more

All your Bitcoins are ours…

June 16, 2011 - Malware authors move fast. Following on from the previous blog post on Bitcoin botnet mining, we have seen a recent Trojan in the wild targeting Bitcoin wallets. The Trojan is Infostealer.Coinbit and it has one motive: to locate (continue reading...) Read more

Bitcoin Botnet Mining

June 16, 2011 - A digital currency known as Bitcoin (BTC) has been causing a bit of a media stir of late due to its use for illicit purposes. Some readers of this blog will be familiar with and have used a (continue reading...) Read more

Are You Sure You’re Secure Online? Take Our Survey

June 16, 2011 -   Do I know who I’m dealing with, and is my communication secure? Those are the two things anyone going online wants to know, especially if they’re banking, shopping or otherwise sharing confidential personal or financial data. That’s because many online (continue reading...) Read more

Targeted Attacks in 2011 Using Ichitaro Zero-Day Vulnerability

June 15, 2011 - We have been observing since January multiple targeted-attacks that use a zero-day vulnerability found in the Japanese word processor software, Ichitaro. JustSystems, the makers of Ichitaro, have already shipped a patch to fix this problem and users who run (continue reading...) Read more

Microsoft Patch Tuesday – June 2011

June 14, 2011 - Hello and welcome to this month’s blog on the Microsoft patch release. This is fairly busy month —the vendor is releasing 16 bulletins covering a total of 34 vulnerabilities.   Fifteen of the issues are rated ‘Critical’ and they affect (continue reading...) Read more

Puddles

June 10, 2011 - I believe that we have reached a saturation point.  You know how, after heavy rain, the ground can’t absorb any more water and it begins to pool on the ground? We’ve reached that point with security incidents.     The bad guys (continue reading...) Read more

A Brave New World, IPv6 Day

June 7, 2011 - June 8th marks World IPv6 Day when a number of major organizations offer internet services using the replacement Internet Protocol version 6 standard. From a security standpoint IPv6 raises some new and potentially interesting problems for malware authors, (continue reading...) Read more

Spear Phishing in Google’s Pond

June 6, 2011 - Francis deSouza - Group President, Enterprise Products and Services, Symantec Earlier this week, Google posted a blog stating that the personal Gmail accounts of numerous users, including senior US government officials, Chinese political activists, officials in several Asian countries (predominantly (continue reading...) Read more

Droid Dreams, a Reoccurring Nightmare for Android Users

June 5, 2011 - Android.Lightdd (the name is derived from the presence of the additional Trojanized package ending in the word ‘lightdd’) has been dubbed as the follow up to Android.Rootcager AKA Droid Dreams, one of the first threats seen in the (continue reading...) Read more

Copyright © 2012 The Security Blog. All rights reserved.