storm

New research suggests that the infamous Storm worm has its roots in a computer worm that first surfaced as early as 2004, two-and-a-half years prior to Storm's widely-recognized birthday. The findings come from security researchers at Damballa, a start-up in Atlanta that monitors activity from botnets, large groupings of hacked, remotely-controlled computers that criminals use for spamming and other online illegal activity. According to the researchers, Storm was born from the ashes of the "Bobax...Please read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format: http://(IP address)/(short random directory name)These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters. Feedbacks welcome: blog_feedback | at | websense.com read more »
addto Add this link to... report Bury 
http://www.pcw.co.uk/personal-computer-world/news/2209293/strom-worm-making-millions-dayBy Clive AkassPersonal Computer World 11 Feb 2008The people behind the Storm worm are making millions of pounds a day by using it to generate revenue, according to IBMs principal web security strategist.Joshua Corman, of IBM Internet Security Systems, said that in the past it had been assumed that web security attacks were essential ego driven. But now attackers fell in three camps.I call them my three Ps, profit, polit read more »
addto Add this link to... report Bury 
As Valentines Day approaches, we see the Storm team have made yet another change in an effort to further populate their army of bots. A subsection of their herd that have been hosting the Valentines-related content now presents the visitor with one of eight randomly themed images and bestows upon them the gift of "valentine.exe," detected as Trojan.Peacomm.D. The page serves up a random image file per visit (or refresh of the page), probably via some server-side scripting. A five second delay using a me read more »
addto Add this link to... report Bury 
A Valentine's themed outbreak of the Storm worm has been detected. Malicious e-mails are being received across the globe -- they contain a Web link, which directs users to a Web site where they can supposedly download a Valentine's card, but in fact are infected with the Storm bug. The virus mirrors the fake Christmas and New Year messages seen in previous months. read more »
addto Add this link to... report Bury