Malware Help. Org | Blog

"Organised criminal hackers are waging a highly sophisticated war by exploiting vulnerabilities in end users’ web browsers using drive-by downloads, security experts warn.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Websense Security Labs has discovered that Windows Live Mail accounts have been targeted in recent spammer tactics. In these recent attacks, spammers have managed to create bots that are capable of signing up and creating random Live Mail accounts that could be used for a wide range of subsequent attacks.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"With more people finally switching to Windows Vista, the operating system is fast becoming a target for security researchers and–surprise!–hackers.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Hackers are currently littering Google’s Blogger site with phony blogs — some containing malware, pornographic images, or pure spam. "Google Blogger is being used as a malware delivery mechanism," says Ken Steinberg, CTO and president of Savant Protection, who discovered the attack while working on his own blog this morning. The attackers apparently are automatically generating the blogs with scripts. The blogs come with nonsensical names and content that’s obviously been generated using English-compliant engines and keyword focuses, he says.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"The number of legitimate Web sites that have been hacked and seeded with code that tries to infect the visitor’s PC with malware now exceeds the number of sites specifically created by cyber criminals, according to a report released today.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"…Microsoft Excel files are being used to exploit a zero-day (previously unknown/unpatched) vulnerability and plant keystroke loggers on select (.gov?) networks…bugs in Microsoft Office applications emerged over the last year as standard weapons for criminals conducting corporate espionage and computer attacks against military targets. Last summer, Microsoft’s Office team struggled to keep pace with flaw discoveries and, after a brief lull, it looks like we’ll see much of the same this year.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"A security researcher has claimed that Yahoo’s system for blocking automated access to its systems - the CAPTCHA image-recognition system - has been effectively cracked. CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) systems are used by Yahoo, as well as Google, Microsoft and others, to stop automated systems from registering web-based email accounts, filling blog comments sections with spam and guessing passwords.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft has warned that an unpatched vulnerability in older versions of Excel is being actively exploited by hackers. The bug, which has become the subject of targeted attacks, affects older versions of Excel. Newer versions Excel 2003 SP3 and Excel 2007 are said to be immune. Details of the vulnerability beyond what packages might be affected remain sketchy at best.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"In a rare public warning to the power and utility industry, a CIA analyst this week said cyber attackers have hacked into the computer systems of utility companies outside the United States and made demands, in at least one case causing a power outage that affected multiple cities.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Thousands of legitimate Web sites are hosting an infection kit that evades detection by attempting to compromise each visitor only once and using a different file name each time, Web security firm Finjan warned last Monday. The attack, dubbed the "Random JS toolkit" by the security firm, currently uses dozens of hosting servers and more than 10,000 legitimate domains to attempt to exploit the systems of visitors to the sites, the company said in an analysis posted to its Web site.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!