Metasploit | DataProtectionCenter.com

Miniduke: web based infection vector

11

Mar

2013

Together with our partner CrySyS Lab, we’ve discovered two new, previously-unknown infection mechanisms for Miniduke. These new infection vectors rely on Java and IE vulnerabilities to infect the victim’s PC. While inspecting one of the C&C servers of Miniduke, we have found files that were not related to the C&C code, but seemed to be […]

Category General Written by Securelist / Blog 0 Comments

Java 0day Mass Exploit Distribution

11

Jan

2013

Just a quick note, it’s only the second week of January, but early 2013 brings with it the first Java 0day mass exploit distribution of the year. There appears to be multiple ad networks redirecting to Blackhole sites, amplifying the mass exploitation problem. We have seen ads from legitimate sites, especially in the UK, Brazil, […]

Category General Written by Securelist / Blog 0 Comments

CVE-2012-1535 and Nuclear Warheads

28

Sep

2012

Our corporate business team has a new “software updater” feature in our Protection Service they want to market. So they asked our lab analyst @TimoHirvonen to provide them with an example demonstrating the amount of time it takes to go from vulnerability to exploit.Here’s what Timo came up with using CVE-2012-1535: . 2012-08-14: Security update available for […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

The Latest in IT Security

Posts Tagged ‘Metasploit’

Miniduke: web based infection vector

Java 0day Mass Exploit Distribution

CVE-2012-1535 and Nuclear Warheads

Categories

Featured

Archives

Latest Comments

About Us

Contact Us