Content Tagged ‘Symantec Security Response’

Happy “Birthday” to Me

April 1, 2010 - For the record, April Fools’ Day isn’t actually my birthday. But in terms of arbitrary age verification for social networking, it’s the date I often use. My reasons for doing this are rooted partly from annoyance and partly due to (continue reading...) Read more

Vietnamese the Latest Target in a Politically Motivated Attack

March 31, 2010 - On Monday, March 29, 2010, bkis.com published a blog describing malware that masqueraded as the Adobe Reader update program. This tactic is an attempt to run a malicious payload while avoiding detection. As we looked into this sample (detected (continue reading...) Read more

Pwn2Own 2010: Lessons Learned

March 30, 2010 - At the recent Pwn2Own contest held during the CanSecWest 2010 security conference, the Web browser targets were the latest versions of Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, and Apple Safari. All of the targeted browser platforms were patched up (continue reading...) Read more

Email Vampires Claim to Protect Your Privacy

March 30, 2010 - Keeping personal information private on the Internet is always a concern for computer users. In a new spam tactic, spammers seem keen to bring disrepute to social networking sites and Webmail services by introducing fear, uncertainty, and doubt regarding the (continue reading...) Read more

Back to Basics with Fake AV

March 30, 2010 - We’ve been seeing Fake AV programs getting more convincing for a while now. Some of the tricks employed by the guys behind these rogue programs include Windows-7-style fake scanners, in-browser “scanners”, and program features that ape other aspects of (continue reading...) Read more

Will SMS Bring You Free Vouchers?

March 30, 2010 - Symantec Security Response has become aware of multiple reports from mainland China and Hong Kong of an SMS worm targeting the Symbian S60 platform. The worm is detected as SymbOS.Merogo.There are two main reasons that helped the threat in (continue reading...) Read more

Downadup/Conficker and April Fool’s Day: One Year Later

March 29, 2010 - As we approach April Fool’s Day 2010, we recognize the one-year anniversary of the Downadup/Conficker threat’s April 1, 2009, “trigger” date. A year ago, the security industry monitored Downadup/Conficker activities to be fortified against the criminal or criminals behind the (continue reading...) Read more

The Phishing of Indian Job Sites

March 28, 2010 - Despite the global economic slowdown, India witnessed a high number of new jobs in the country during the first quarter of 2010. With the job market looking positive, job sites seem to have benefited with more users accessing their websites. Below (continue reading...) Read more

Journey to the Center of the PDF Stream

March 27, 2010 - Malware authors use numerous unconventional techniques in their attempts to create malicious code that is not detected by antivirus software. As malicious code analysts, though, it is our job to analyze their creations, and as such we have to be (continue reading...) Read more

“If I Can Dream” Website Defaced

March 26, 2010 - The website for If I Can Dream, a popular American reality TV show, was hacked today and the calendar section defaced with messages from a hacker. If I Can Dream is the latest in a string of reality TV talent (continue reading...) Read more

Password Survey Results

March 26, 2010 - I am convinced that the readers of the Symantec Security Response blog are the smartest around! The results from our Password Survey prove it. Actually, the number of responses itself proves it to me. At best, I thought 20 or (continue reading...) Read more

Child Tax Credit is the New Phishing Bait

March 25, 2010 - Who wouldn’t want some tax benefits in the current economic times? Don’t phishers and scammers know that all too well! In a new phishing scheme, Symantec has found that Child Tax Credit is being used as bait to lure parents (continue reading...) Read more

Spam Beat: On Selling Gibberish

March 23, 2010 - One can be both impressed and amused at how far image spammers will go in distorting their image payloads in an attempt to slip through spam filtering technologies. If the spammer somehow manages to slip spam through spam filters from (continue reading...) Read more

Icelandic Volcano Erupts, Fake Antivirus Spews Forth

March 22, 2010 - Yesterday there was a volcanic eruption in Iceland near the Eyjafjallajoekull glacier that has led the Icelandic authorities to declare a state of emergency in southern Iceland. People living nearby have been evacuated in case of glacial melt water (continue reading...) Read more

Beyond the Initial Compromise

March 18, 2010 - Over the past few years, targeted attacks against organizations have become increasingly common and have gained notoriety. One of the most well known of these attacks is the recent compromise of Google, Adobe, and many other companies as part of (continue reading...) Read more

Passwords—Can’t Live With ‘em, Can’t Live Without ‘em

March 17, 2010 - People choose their passwords based on different factors: how easy they are to remember, how strong or complex they are, the sentimental value they have, etc. Symantec has developed a survey to show how you compare to others with your (continue reading...) Read more

New Healthcare IT Landscape and Related Security Needs

March 17, 2010 - In 2005, the European Commission embarked on a new policy framework that embraced all aspects of the “information society.” This framework, called i2010 - A European information society for growth and employment, provides the broad policy guidelines for the (continue reading...) Read more

Fraudsters Running a Classified Ad Campaign

March 16, 2010 - Symantec has recently observed a trend of phishing sites attacking brands that feature online classifieds. The legitimate classifieds brands help customers seek and exchange information on various categories such as employment, real estate, automotive, matrimonial, and so on. These brands (continue reading...) Read more

Mass Phishing of Retail Electronic Payment Brands

March 15, 2010 - In the past couple of months, Symantec has observed a mass phishing attack on two major brands that provide retail electronic payment services for banks across the globe. Legitimate retail electronic payments using credit and debit cards are the most (continue reading...) Read more

Attacks on Indian Income Tax Department Continue

March 15, 2010 - Symantec previously reported a phishing attack on the Indian Income Tax Department. Phishing emails boasting of tax refunds were sent to users in an attempt to entice citizens to enter their credentials on a bogus website. Recently, new attacks (continue reading...) Read more

Copyright © 2012 The Security Blog. All rights reserved.