It seems Internet users do not have any peace anymore. We have witnessed a lot of security issues on the Internet to date but never like this latest period, which can be named -to my personal perspective- as “the age of compromised websites”. The Anti-Malware research community is getting increasing...

by Rossano Ferraris Another interesting case I would like to bring to your attention is the effect of the so-called “fake-codec” trojans. Here is what I figured out after searching the phrase “daily dawn” on the Google search engine. The screenshot reflects a blogspot webpage from the search results...

by Rossano Ferraris The other day spammers spread two interesting emails to users throughout the Internet and attempted to make users believe these emails originated from Microsoft. The emails contained an alert that advised users of an undiscovered vulnerability in the Kodak Image Viewer and a new 0...

A famous quotation from the The Art of War is "If you know both yourself and your enemy, you will come out of one hundred battles with one hundred victories." A malware author following the principles of Sun Tzu might say "If you know both yourself and your victim and use social engineering...

The day after I got back from a 16 day trip to Europe, I opened a letter from an unknown company who informed me that information about my bank account had been removed by one of their employees. The employee sold the information to a data broker who then sold the data to some direct marketing companies...

A chill ran up my spine when I came to my front door and it was already open. A USB cable lay strewn across the doorway. I could hear a stereo speaker eerily buzzing inside. I pushed the swinging door aside and confirmed my fear. I was robbed! After a wonderful weekend of camping and fishing, I returned...

It appears that the website pocketpcmag.com has been hijacked. At the time this article is written, webpages for articles dated June 2006 and May 2005 contain JavaScript code that lead to another page and script. The script uses an iFrame to redirect the browser to a website of the .cn domain known to...

A few days shy of one of the most important days of the year for sports fans across America, the website for the venue of Super Bowl XLI had a little surprise for its visitors. Earlier today, dolphinstadium.com, dolphinsstadium.com and proplayerstadium.com were compromised by malicious code . A link...

A recent vulnerability within the Windows shell is being exploited in the wild. The vulnerability is made accessible to attackers via ActiveX controls in Microsoft Internet Explorer and allows the arbitrary execution of code. Reports have surfaced that this vulnerability is being actively exploited in...

Microsoft has released a security bulletin MS06-055, Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486). Microsoft is issuing a patch to protect systems against the vulnerability, and advises users to update their systems immediately. This vulnerability allows an attacker...