Monday, March 30, 2009

GhostNet or Gh0st RAT: The Cyber Persecution of Tibet

›
For many members of the non-security research community, the New York Times story this week was big news: "Vast Spy System Loots Comput...
Wednesday, March 25, 2009

Bank Hacking Exposed: The Analyzer Affadavit

›
One of my favorite twitter friends, InfraGard member and PCI expert Michael Dahn (@sfoak), sent his tweets a link today to the Affidavit of ...
Thursday, March 19, 2009

Stop the Rumors: Quit SMSing about WalMart Gang Initiations

›
My daughter and her teenage friend were sitting on the couch watching TV today when they began getting text messages on their phone. Here...
Wednesday, March 18, 2009

Carders do battle through spam - carder.su

›
We've seen several cases in the past where Law Enforcement action is triggered by one criminal actively and publicly spreading informati...
Monday, March 16, 2009

Waledac: Fake Dirty Bomb in Your City

›
In the February 25th edition of this Blog, Watch Out For Coupon Offers , we described how the Waledac malware family was being distributed i...

Finding the Spam Before Its Spammed . . .

›
This morning I met with Brian Tanner, one of the UAB Malware Analysts, to determine what malware he should unpack for us this morning. I to...
Wednesday, March 11, 2009

ClassMates.com spam keeps sucking passwords

›
Yesterday we received more than 800 copies of spam email messages using a ClassMates.com subject to trick people into infecting themselves w...
Thursday, February 26, 2009

Another Password Stealer hides as Bank of America video malware

›
One of our top spam campaigns today at the UAB Spam Data Mine is the newest Snifula/Gozi password stealing trojan, this time disguised as a ...
Wednesday, February 25, 2009

Money Tight? Watch out for Coupon Offers from CyberCriminals

›
While investigating the Waledac malware, UAB malware analysts Brian Tanner and Thom Savage discovered a new scam targeting those who may be ...
Friday, February 13, 2009

Javeline Spins an Identity Theft Survey

›
Kevin Poulsen at Wired Debunked Javeline's Identity Theft Report already, but I can't help myself from lending an outraged voice to...
Thursday, February 12, 2009

New Trend: Stimulus Scammers

›
With news of the President's Stimulus package dominating the media, it was only a matter of time before one of our long-time scammers de...
Wednesday, February 11, 2009

February 2009 Black Tuesday Report - Critical Exchange Server Patch

›
We interrupt our regularly scheduled Valentine's Day Spam Countdown for an important message about Microsoft Black Tuesday. Yesterday...
Monday, February 09, 2009

Traveler Scams: Email Phishers Newest Scam

›
Last Friday I had a phone call that sounded like an opportunity to look at a new scam from end-to-end. A retired school teacher in the Birm...
Sunday, January 25, 2009

Dear Santa (or, the American Recovery and Reinvestment Act of 2009)

›
Dear Santa, We have been very good. Please send us $825 Billion worth of free stuff. Sincerely Yours, Congress Turn on C-SPAN today and you...
Monday, January 19, 2009

Downadup / Conflicker Worm: 8? 9? 10 Million Infected?

›
Its been quite a while since we've had a true run-away worm on the Internet, but if the claims of F-Secure are accurate, we've certa...
Thursday, January 08, 2009

US Army hacked as Gaza protest

›
Today the anti-Israeli hackers for the first time brought their Cyber Propaganda War to Washington DC in the form of their attack against th...