The Latest in IT Security

Posts Tagged ‘Russia’

We have been tracking the Carberp cybercrime group’s activity for three years now. Tracking started in 2009 with the first samples of the Carberp malcious software seen in the wild. By the beginning of 2010 the second wave of Carberp activity had forced out other banking malware families (Win32/Spy.Shiz, Win32/Hodprot) in Russia. We summarized the […]

Read more ...

This fake flight email leads to malware on saprolaunimaxim.ru. From: Simonne Storey [sandy@krishermckay.com] Subject: Your Flight Order ?994284 Dear Customer, FLIGHT NUMBER A45-342 DATE & TIME / JUNE 27, 2012, 10:140 PM ARRIVING: NEW YORK JFK TOTAL PRICE : 456.62 USD Please download and print out your ticket here: DOWNLOAD Amercian Airlines{br[1-5]} The link hoes […]

Read more ...

I haven’t had much time to analyse this yet, but there seems to be some sort of injection attack using the domain partyysoon.info. It may be targeting sites in Sweden. Malicious URLs (don’t click these, obviously): hxxp:||partyysoon.info/index.php hxxp:||partyysoon.info/js_pa/F.class hxxp:||partyysoon.info/Set.jar hxxp:||gotchasworkspaces.in/duquduqu1/font.php hxxp:||beards.christianmomsgetaways.com/index.php?p=b2e04035f7b91e43 These IPs and domains are all related to the attack: 5.10.65.142 (Spinor J Ltd […]

Read more ...


Categories

MONDAY, MARCH 17, 2025
WHITE PAPERS

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...

Featured

Archives

Latest Comments