Wednesday, April 29, 2009

Waledac Moving on to . . . Canadian Pharmacy?

›
After monitoring the Waledac "infection domains" for more than a month, our last "interesting" event was the change in L...
Tuesday, April 21, 2009

President Obama's CTO: Aneesh Chopra

›
Like so many others who were playing the guessing game regarding President Obama's new CTO, I was wrong. I take comfort in failing alon...
Wednesday, April 15, 2009

Waledac shifts to SMS Spy program

›
We've known that Waledac spreads itself via Social Engineering - convincing users that they WANT to download a program. Recently we...
1 comment:
Monday, April 13, 2009

New Drug sites avoid Visa and MasterCard, Sell Hydrocodone

›
Those who research Pharmaceutical spam have learned that there are basically two major classes of drugs. Those which the Feds care about s...
Thursday, April 09, 2009

Is There a Conficker E? Waledac makes a move...

›
At UAB Computer Forensics, we have been tracking the spam bot, Waledac, since March 19th, by checking every so often (like 4 times a minute)...
Wednesday, April 08, 2009

Microsoft Security Intelligence Report 2H08

›
The Microsoft Security Intelligence Report for the second half of 2008 has been released (the 184 PDF version, available from http://microso...
Monday, March 30, 2009

GhostNet or Gh0st RAT: The Cyber Persecution of Tibet

›
For many members of the non-security research community, the New York Times story this week was big news: "Vast Spy System Loots Comput...
Wednesday, March 25, 2009

Bank Hacking Exposed: The Analyzer Affadavit

›
One of my favorite twitter friends, InfraGard member and PCI expert Michael Dahn (@sfoak), sent his tweets a link today to the Affidavit of ...
Thursday, March 19, 2009

Stop the Rumors: Quit SMSing about WalMart Gang Initiations

›
My daughter and her teenage friend were sitting on the couch watching TV today when they began getting text messages on their phone. Here...
Wednesday, March 18, 2009

Carders do battle through spam - carder.su

›
We've seen several cases in the past where Law Enforcement action is triggered by one criminal actively and publicly spreading informati...
Monday, March 16, 2009

Waledac: Fake Dirty Bomb in Your City

›
In the February 25th edition of this Blog, Watch Out For Coupon Offers , we described how the Waledac malware family was being distributed i...

Finding the Spam Before Its Spammed . . .

›
This morning I met with Brian Tanner, one of the UAB Malware Analysts, to determine what malware he should unpack for us this morning. I to...
Wednesday, March 11, 2009

ClassMates.com spam keeps sucking passwords

›
Yesterday we received more than 800 copies of spam email messages using a ClassMates.com subject to trick people into infecting themselves w...
Thursday, February 26, 2009

Another Password Stealer hides as Bank of America video malware

›
One of our top spam campaigns today at the UAB Spam Data Mine is the newest Snifula/Gozi password stealing trojan, this time disguised as a ...
Wednesday, February 25, 2009

Money Tight? Watch out for Coupon Offers from CyberCriminals

›
While investigating the Waledac malware, UAB malware analysts Brian Tanner and Thom Savage discovered a new scam targeting those who may be ...
Friday, February 13, 2009

Javeline Spins an Identity Theft Survey

›
Kevin Poulsen at Wired Debunked Javeline's Identity Theft Report already, but I can't help myself from lending an outraged voice to...