screenshot | DataProtectionCenter.com

Now “ce.ms” free domains are being used to host malicious code

28

Oct

2011

A few months back, I posted a blog on “co.tv” domains being used by attackers to host malicious code . We had identified number of different domains being used to carry out attacks using heavily obfuscated JavaScript. Now it appears that attackers are leveraging free “.ce.ms” domains. Likewise, we have identified a number of .ce.ms […]

Category Security Written by Zscaler Research 0 Comments

Fake AV business alive and kicking

27

Oct

2011

Since June 2011 we have seen a substantial decrease in the number of fake antivirus programs. Right now we are observing 10 000 daily attempts to infect users with Trojan-FakeAV; back in June the figures were 50-60,000. The daily number of attempted infections using Trojan-FakeAV in the past 5 months Nevertheless, new versions of this […]

Category General Written by Securelist / Blog 0 Comments

DroidKungFu Utilizes an Update Attack

25

Oct

2011

We did a quick post yesterday about a DroidKungfu sample that appeared to use a novel infection vector. Now, as promised, more technical details. The application we’ve been analyzing is called com.ps.keepaccount, and a quick check into its content reveals a couple of findings. The original application (SHA-1: 5e2fb0bef9048f56e461c746b6a644762f0b0b54) does not show any trace of […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

The Latest in IT Security

Posts Tagged ‘screenshot’

Now “ce.ms” free domains are being used to host malicious code

Fake AV business alive and kicking

DroidKungFu Utilizes an Update Attack

Categories

Featured

Archives

Latest Comments

About Us

Contact Us