worm

http://www.pcw.co.uk/personal-computer-world/news/2209293/strom-worm-making-millions-dayBy Clive AkassPersonal Computer World 11 Feb 2008The people behind the Storm worm are making millions of pounds a day by using it to generate revenue, according to IBMs principal web security strategist.Joshua Corman, of IBM Internet Security Systems, said that in the past it had been assumed that web security attacks were essential ego driven. But now attackers fell in three camps.I call them my three Ps, profit, polit read more »
addto Add this link to... report Bury 
Brazil is the home of the infamous Infostealer.Bancos family of malware. Recently, however, we have seen a more diverse number of sites - beyond just banking sites - coming into the crosshairs of the Brazilian malware gangs. Is the recent W32.Imcontactspam worm another of their creations? The worm is Brazilian and spammed the infected users’ MSN contacts with email advising them that they had received an electronic greeting card. We see these types of worms quite often; however what caught our attention read more »
addto Add this link to... report Bury 
A Valentine's themed outbreak of the Storm worm has been detected. Malicious e-mails are being received across the globe -- they contain a Web link, which directs users to a Web site where they can supposedly download a Valentine's card, but in fact are infected with the Storm bug. The virus mirrors the fake Christmas and New Year messages seen in previous months. read more »
addto Add this link to... report Bury 
Out of controlUpdated Microsoft boffins are researching the possible benefits of distributing software patches using the same techniques as computer worms. The mechanism, which security experts have questioned, aims to reduce the load on servers handling content distribution functions including patching.… read more »
addto Add this link to... report Bury 
Microsoft is moving to counter some scathing comments regarding a security paper authored by researchers at its Cambridge, England, facility. read more »
addto Add this link to... report Bury 
Due to some confusion with this particular threat, we’ve decided to provide some further details on the Orkut worm we blogged on earlier in the week. The worm, recently renamed to W32.Scrapkut, uses active code injection as a vehicle to propagate to the Orkut friends of its unfortunate victim. Initially, a malicious scrap is posted to the victim’s scrapbook, containing a link to what appears to be a YouTube video: When a victim clicks on the link, they are redirected to an external site which prompts read more »
addto Add this link to... report Bury 
From social networking to social engineeringMalware authors have written a worm for Orkut, Google-owned networking site that's big in Brazil.… read more »
addto Add this link to... report Bury 
A new storm worm with an April Fool's Day theme is targeting the Web, according to security software firm PC Tools. read more »
addto Add this link to... report Bury 
Malware authors will often have their files display something to the user so that they actually believe the file is legitimate. Many of us have experienced such tricks, including fake errors stating that a specific file could not be found or that the application failed to load properly. Today we will look at one of these seemingly innocent files and find that its doing much more than just showing you an "interesting" video. read more »
addto Add this link to... report Bury 
Shrinking awayThe botnet associated with the Storm worm shrank in April to just five per cent of its original size, according to MessageLabs, which conducts a monthly analysis of malware trends.… read more »
addto Add this link to... report Bury 
No sooner had various agencies commented on the reduction of the size of the Storm network than we started seeing signs of another wave of malware in the offing. We are currently tracking some fast-flux domains related to Trojan.Peacomm (a.k.a. Storm). These domains were registered just a few days ago. Simply visiting the sites presents the user with a blank page; however, modifying the URLs to access a specific file runs a script which attempts to exploit several different vulnerabilities. Some of the vul read more »
addto Add this link to... report Bury