We recently received a file (from CERT) for analysis. We found that the file was a Trojan that opens a back door on a compromised computer and listens for commands on port 7777. This by itself is not very unusual, but what surprised us was that this file was being distributed by Energizer Inc as part of a USB charger-monitoring software package.
See the original post here:
Back Door Found in Energizer DUO USB Battery Charger Software
Posted by (0) Comment
Recently, Symantec observed some high-profile coverage of a threat being reported as a new type of computer virus known as “Kneber.” In reality Kneber is simply a pseudonym for the Zeus Trojan/botnet. The name Kneber refers to a particular group, or herd, of zombie computers (a.k.a.
Read more from the original source:
“Kneber” = Zeus
Spammers are becoming bolder, targeting even government agencies such as the National Intelligence Council (NIC) to further their malicious causes. Trend Micro fraud analysts were recently alerted to the discovery of spammed messages that purported to come from the NIC —the Intelligence Community (IC)’s center for midterm and long-term strategic thinking
More:
ZBOT Variant Spoofs the NIC to Spam Other Government Agencies
Posted by (0) Comment
Kudos to the Chinese authorities for shutting down an online hacker training operation known as the Black Hawk Safety Net. The Black Hawk operation, which provides Trojan software and lessons in cyberattack techniques, comprises 12,000 paid subscribers and another 120,000 free members. Three people who run the Black Hawk’s website have been arrested, and the site has now been blocked from access
More:
Black Hawk Down
Posted by (0) Comment
Posted by (0) Comment
As the rescue efforts continue in Haiti , the world waits with bated breath for more good news about survivors.
Read the original post:
Haiti Spam Leads to New Malware
While Trojan.Hydraq has been described as sophisticated, the methods used to obfuscate the code are relatively straight forward to deobfuscate.
Posted by (0) Comment
In our last Trojan.Hydraq (Aurora) blog, The Trojan.Hydraq Incident , we mentioned that one of the components of this Trojan is based on VNC code and has the ability to allow an attacker to control and stream a live video feed of a compromised computer&rsquo
See more here:
The Hydraq VNC Connection
Posted by (0) Comment
The number of systems infected by various SASFIS Trojan variants has been increasing since the end of 2009, affecting networks across the globe.
Read this article:
SASFIS Fizzles in the Background
Recent cyber attacks on Google and other organisations have been covered greatly by the media, much owing to the size and notability of the Companies affected. However, what this incident really does is bring to view the true complexity and sophistication of computer threats, and that any user or organization - large or small, could potentially be at risk. Although these attacks were orchestrated to target certain groups or organisations, any computer can actually fall prey to them
Go here to read the rest:
Cyber Attacks on Google and Others – Who is Really at Risk?