ip addresses | DataProtectionCenter.com

Flame: Replication via Windows Update MITM proxy server

06

Jun

2012

The Flame malware uses several methods to replicate itself. The most interesting one is the use of the Microsoft Windows Update service. This is implemented in Flame’s “SNACK”, “MUNCH” and “GADGET” modules. Being parts of Flame, these modules are easily reconfigurable. The behavior of these modules is controlled by Flame’s global registry, the database that […]

Category General Written by Securelist / Blog 0 Comments

“Scan from a HP ScanJet” spam / uzindexation.ru

06

Jun

2012

This fake HP OfficeJet spam leads to malware on uzindexation.ru: From: Ashley Madison [mailto:donotreply@ashleymadison.com] Sent: 05 June 2012 04:12 Subject: Scan from a HP ScanJet #593159 Attached document was scanned and sent to you using a Hewlett-Packard HP Officejet 6821P. Sent by: Daxton Images : 3 Attachment Type: .HTM [INTERNET EXPLORER] Hewlett-Packard Officejet Location: machine […]

Category Security Written by Dynamoo's Blog 0 Comments

List of domains hosting webshells for Timthumb attacks

31

May

2012

We have been tracking timthumb.php related attacks for a while and they are still at full force (yes, some people are still using the outdated versions and getting compromised). Just for the month of May, we identified more than 400 domains hosting backdoors for those type of attacks and a botnet with more than 1,000 […]

Category Security Written by Sucuri 0 Comments

The Latest in IT Security

Posts Tagged ‘ip addresses’

Flame: Replication via Windows Update MITM proxy server

“Scan from a HP ScanJet” spam / uzindexation.ru

List of domains hosting webshells for Timthumb attacks

Categories

Featured

Archives

Latest Comments

About Us

Contact Us