Matthew Hines

Koobface Crew Keeps Foot to Floor

The Koobface worm has earned a spot as perhaps the most noteworthy malware campaign aimed specifically at users of social networks to date, having laced itself onto major Web 2.0 properties including Facebook, MySpace and Twitter over the last year. But despite researchers best efforts to follow the attacks and help networking sites and users […]

New PowerPoint Attacks Hit Old Flaw

Researchers are tracking the emergence of a new set of malware attacks loaded into Microsoft PowerPoint documents that take aim at a long-patched vulnerability in the application. Highlighting the success that many attackers still have in launching threats that prey on vulnerabilities that should have been fixed long ago, the new PowerPoint attacks seek to […]

China Flooding Web with SQL Injection Attacks

Despite its time-honored status from a technical standpoint, SQL injection remains a massively popular format for online malware campaigns, with a tidal wave of the threats currently emanating out of China. As proven in the recent indictment of American Roberto Gonzalez, charged with helping to carry out some of the largest card data heists discovered […]

Google: Malware Sites on the Upswing

New statistics released by search giant Google indicate that it is crawling an ever-growing number of URLs that somehow seek to infect end users’ computers. Despite that fact, the search market leader claims that it is delivering fewer nefarious sites in its search results, thereby shielding greater numbers of Web surfers. In a new report […]

Survey: Hackers on Vacation Before Q4 Saturation

Malware and spam rates may not be on the decline, but a survey of hackers attending the DEFCON 17 conference in Las Vegas earlier this month found that many members of the underground cyber-economy work less during Q3 before ramping up their efforts again during Q4 ahead of the holiday season. Experts have noted for […]

Researchers Warn of Powerful New Data Theft “Cocktail”

Researchers with online security services provider ScanSafe are warning of a potent new blended attack that seeks to steal end users’ personal data and is spreading rapidly across the Web. Mary Landesman, senior security researcher with ScanSafe, said in a brief blog post that the powerful “cocktail” of backdoor, password stealing malware and Trojan downloader […]

Attack Variants Living Shorter Shelf-Lives

As attackers seek to endlessly vary their threats in order to circumvent reactive security controls and find their way onto more end users’ machines, individual virus samples are appearing, and disappearing, faster than ever, experts contend. For years, malware code writers and distributors have been using techniques including server-side polymorphism to conjure code scripts that […]

Criminal Prescription: Fake Pharmacies Haunt Bing

Illegal pharmacies have long been a staple of the Internet, despite the efforts of regulators, public and private, aimed at removing them from the Web. Newly published research into ad results provided by Microsoft’s recently launched Bing search engine find that the unauthorized sites are still popping up all over the place, however. The uncertified […]

Open Source Web Anti-Malware Tool Released

An interesting new piece of security freeware was launched today as Dasient introduced an open source version of its Web server infection remediation technology. An offspring of Dasient’s Web Anti-Malware (WAM) remediation package, the open source Mod Anti-Malware Lite release is an Apache server module that promises to allow Web site operators, Web hosts and […]

True Love Never Dies

True love never fades, it only hides for a short time to return again even stronger. At least that’s what the romance experts seem to believe. Unfortunately the same can be said of some long-in-the-tooth malware propagation techniques. It’s been like a trip down memory lane of late as malware distributors and spammers have been […]