McAfee Research BlogHow Much Does My Identity Cost? (the Sequel)September 1st, 2010Posted by Francois Paget
Zeus Botnet Attacks via FedEx ScamSeptember 1st, 2010Posted by BuenoWosotowsky Yesterday we discovered a new Zeus campaign. Most of the messages associated with the new spam campaign are linked to the Asprox botnet. This time, the focus is on FedEx. Most of the attachments start with either FedExDoc[randomnumbers].exe or FedExInvoice[randomnumbers].exe. Those attachments are recognized as the Bredolab Trojan, which will download the Zeus component. This Zeus variant [...] Labs Releases Whitepaper on Cooperative Anti-Malware on Endpoint and GatewayAugust 31st, 2010Posted by David Marcus The Anti-Malware engine is a critical and core piece of the McAfee anti-malware solutions. As with any core technology, the engine must be rock-solid stable, fast, and functionally rich. A new McAfee Labs whitepaper outlines these engine technologies and values, covering both endpoint and gateway uses. Beyond introductions to malware detection methodologies–ranging from exact detection to [...] iPhone OS – Safe again?August 30th, 2010Posted by Mike Price Three weeks ago a ‘mysterious’ new jailbreak technique was posted to jailbreakme.com. Research to date indicates that this technique leverages two distinct vulnerabilities to gain access to devices. The first issue exploited is a FreeType CFF font handling issue, exploitable via MobileSafari. The second issue exploited is an IOSurface framework issue that allows for privilege [...] Newegg Password Reset Scam: a Harbinger of Threats to Come?August 26th, 2010Posted by Adam Wosotowsky
Insecure Library Loading in OS and ApplicationsAugust 25th, 2010Posted by Geok Meng Ong
Three Strikes to Latest Phishing ScamAugust 24th, 2010Posted by Felix Martinez
How Much Does My Identity Cost?August 23th, 2010Posted by Francois Paget
Fraud Strikes U.S. Travel Authorization AgencyAugust 17th, 2010Posted by Peter Meyer
New Wave of Zbot TrojanAugust 14th, 2010Posted by Pedro Bueno, Guilherme Venere and Abhishek Karnik McAfee Labs detected a new wave of the PWS-Zbot (a.k.a Zeus) spam campaign this week. Some common phrases used in the email subject headers: Subject: Sales Dept Subject: Another candidate brought to you Subject: Summary of payments These emails carried PWS-Zbot Trojan variants that are a part of the 2.x version of the Zeus botnet, and currently try to access [...] Prolific Carder Arrested in FranceAugust 12nd, 2010Posted by Francois Paget
McAfee Security Journal Fall 2010: Security Takes The OffensiveAugust 11st, 2010Posted by Toralv Dirro Bored by numbers, stats and facts in normal reports? Then the latest McAfee Security Journal is just what you were waiting for! It’s time to be proactive on cybersecurity, the latest McAfee, Inc. Security Journal examines strategies for shifting from defense to offense in cybersecurity. In light of recent cyberespionage, the breakup of cybercrime rings, and the threats [...] McAfee Quarterly Threats Report ReleasedAugust 10th, 2010Posted by Toralv Dirro Malware has reached its highest levels, making the first six months of 2010 the most active half-year ever for total malware production. At the same time, spam leveled out, with only 2.5 percent growth from last quarter. Malware continued to soar in the second quarter, as there were 10 million new pieces cataloged in the first [...] Weaknesses Undermine Wind River’s VxWorks Operating SystemAugust 6th, 2010Posted by Yichong Lin Recently the US-Cert issued two security bulletins (VU#362332 and VU#840249) about weaknesses in Wind River Systems VxWorks embedded operating system. VxWorks is one of the most popular operating systems that runs on a variety of appliances and devices. Some of these appliances are part of the critical infrastructure in an organization, such as routers and [...] Remote iPhone Jailbreak Using PDF Exploit Should Serve as Wake-Up CallAugust 3th, 2010Posted by David Marcus Like many iPhone users, I “jailbreak” my iPhone. I do this for many reasons, but mainly for console-level access and the darn cool infosec tools that are available through Cydia. Like many iPhone users, I was quite happy when the Electronic Frontier Foundation (EFF) was able to get jailbreaking included under “fair use” within the [...] |






