TrustedSource™ Query
Enter IP address, domain name or URL to check reputation/traffic patterns:
 



TrustedSource™ Blog

RSS Feed

McAfee Family

November 19th, 2008

As of today, we are very excited to have completed our integration into the McAfee family. It is quite thrilling to be part of the largest pure-play security vendor in the world and the tremendous customer reach that comes with that position. But even more exciting for me is the incredible opportunity that [...]

The end of domain tasting

November 14th, 2008

Domain tasting is a practice of systematic abuse of ICANN’s 5 day “grace period” (Add Grace Period or AGP) policy, which allows a registrant to register a domain name and return it for a full refund within 5 days. For years, many online advertisers, some registrars and spammers have been taking advantage of this [...]

Krebs Spam Takedown Service

November 14th, 2008

There are a number of companies in the security industry that specialize in quick and efficient takedown of malicious sites (primarily focusing on sites that are hosting phishing webpages that attack their customers). But this week, Brian Krebs, an investigative technology reporter from the Washington Post, singlehandedly accomplished something that had never been done before [...]

Web Browsers: Emerging Platform Under Attack

November 13th, 2008

Web browsers are the critical platform for both current and future business applications, and at the same time are the target of sophisticated Web-borne malware attacks.In our new publication, entitled “Web Browsers: Emerging Platform Under Attack,” we are taking a look into the security measures of today’s web browsers and the most popular browser plugins.

New Adobe Reader vulnerability exploited in the wild

November 11st, 2008

Last week Adobe issued a security update which addressed several critical vulnerabilities in Adobe Reader and Acrobat versions. Three days later, malicious PDF documents appeared in the wild, exploiting an input validation issue in the util.printf JavaScript method (CVE-2008-2992) leading to remote code execution as reported by the fellow handlers at the Internet Storm Center. With [...]

Secure Computing’s Research Team Releases Q3 Internet Threat Report

October 28th, 2008

Secure Computing has published the Q3 2008 Internet Threat Report containing data and analysis covering both email and web-based threats. The report was compiled by the Secure Computing research teams and based on the company’s TrustedSource Global Reputation System with its unique and unparalleled view of worldwide Internet traffic. Among the report’s findings, Q3 saw the [...]

Password-Stealing Trojan Spreads Through Zero-Day Vulnerability

October 24th, 2008

A critical security hole fixed by Microsoft with Security Bulletin MS08-067 is actively exploited in the wild by a new password-stealing Trojan. Next to gathering and stealing Windows Live-, Protected Storage- and Microsoft Outlook-credentials which are phoned home to China, the Trojan downloads an additional exploit component from the Internet. It exploits the above mentioned [...]

The Spammer’s Vote - Update

October 24th, 2008

We continue to track the spammers’ presidential candidate preference in this election. Since our last post, we have seen dramatic swings with Obama’s lead being as low as 1% to as high as 99%. In the past week, the spam containing Obama’s name has seen a significant increase and has maintained a lead margin approaching 70%. The [...]

IWF National Awareness Day - 24 October 2008

October 24th, 2008

Secure Computing Coproration is a member of the Internet Watch Foundation (IWF), the UK internet ‘Hotline’ for the public to report their inadvertent exposure to online child sexual abuse content hosted anywhere in the world and criminally obscene and incitement to racial hatred content hosted in the UK. The IWF works in partnership with the online [...]

The Spammers’ Vote

October 6th, 2008

Elections in United States are coming up, and spammers continue to leverage the public interest of election topics to lure users into opening spam and virus messages. Secure Computing’s TrustedSource Labs has already taken a look at the candidates’ popularity among spammers in our October Spam Report. We found that mostly due to a spam [...]

Rise Of The PDF Exploits

September 22nd, 2008

The Portable Document Format (PDF) is one of the file formats of choice commonly used in today’s enterprises, since it’s widely deployed across different operating systems. But on a down-side this format has also known vulnerabilites which are exploited in the wild. Secure Computing’s Anti-Malware Research Labs spotted a new and yet unknown exploit toolkit [...]

Gibberish Spam

September 15th, 2008

The global email and spam volumes on September 11 last week climbed to the record levels that we have not seen since late March of this year. Volumes have been decreasing during spring and summer after the March records, but began rising again in August and September. The increase on September 11, however, was so  [...]

Web Server Security: How a Typo Led to a Massive Sell-Off

September 15th, 2008

The Financial Times reported last week that a major sell-off of United Airlines was triggered by an old link on the front page of the Chicago Tribune. The link was pointed to an article about United going bankrupt; there was just one problem - the article was from 2002. Google News picked up the link [...]

Digging for Worms

September 11st, 2008

One of today’s popular Web 2.0 sites is without doubt digg.com, where people can share and discover content on the Internet … the so called “user-generated content”. The community decides what’s popular by “digg” or “bury” it and then brings content to the front page where an even bigger audience can be reached. But since everyone [...]

Tell me your User-Agent and we may not infect you

September 9th, 2008

One of the awkward “free giveaways” of additional payloads in today’s malware is the rise of Rogue Anti-Spyware products. These misleading applications scare the user with fake messages, telling that the system is infected with malware. In order to be able to remove the fake threats it has to be paid for - that’s where [...]