News July 2008

Home News Archive Translate Traducen

News July 2008

29 July 2008
Guides, Papers, etc
www.mcafee.com
McAfee Research Reveals Many SMBs in Denial About Security. Read more
blog.wired.com
Kaminsky on How He Discovered DNS Flaw and More. Read more
www.wired.com
Lesson From the DNS Bug: Patching Isn't Enough. Read more
blog.metasploit.com
BailiWicked. Read more
blog.trendmicro.com
The �BailiWicked� Problem. Read more
blogs.technet.com
Pushing the Limits of Windows: Physical Memory. Read more
ddanchev.blogspot.com
Over 80 percent of Storm Worm Spam Sent by Pharmaceutical Spam Kings. Read more
ddanchev.blogspot.com
Click Fraud, Botnets and Parked Domains - All Inclusive. Read more
ddanchev.blogspot.com
Smells Like a Copycat SQL Injection In the Wild Read more
ddanchev.blogspot.com
Vulnerabilities in Antivirus Software - Conflict of Interest. Read more
ddanchev.blogspot.com
Email Hacking Going Commercial. Read more
ddanchev.blogspot.com
Lazy Summer Days at UkrTeleGroup Ltd. Read more
ddanchev.blogspot.com
Coding Spyware and Malware for Hire. Read more
www.avertlabs.com
The peaceful worm�. not :( Read more
www.avertlabs.com
What Is Undetectable Malware? Read more
www.avertlabs.com
Pay Attention to 3rd-Party Software. Read more
blog.trendmicro.com
Fake Trend Micro Virus Clean Tool Spreads Malware Dirt. Read more
bharath-m-narayan.blogspot.com
TheSpyBot Promo site. Read more
blogs.paretologic.com
Fresh Zlob Variant not well detected. Read more
evilcodecave.wordpress.com
Fake Italian uTorrent Website and Malicious Application. Read more
www.prevx.com
Keep playing it down, Its FUD, Right ? Read more
blogs.authentium.com
What is this response time thing anyway? Read more
news.bbc.co.uk
Chinese web filtering 'erratic'. Read more
www.forbes.com
The No-Tech Hacker. Read more
resources.zdnet.co.uk
The days of desktop antivirus apps are numbered. Read more
www.f-secure.com
Storm, the feds and Facebook. Read more
www.f-secure.com
One Million Detections. Read more
isc.sans.org
Never disable your firewall, no matter how good it sounds. Read more
isc.sans.org
Recursive DNS Cache Auditing Resource. Read more
www.eweek.com
What if You Fell Through a Manhole? Read more
www.darkreading.com
When Penetration Testers (Almost) Get Caught. Read more
www.cs.indiana.edu
Exploitable Redirects on the Web: Identification, Prevalence, and Defense (pdf). Read more
www.podtrac.com
Audio. Security Now 154: Listener Feedback 46. Listen
www.0x000000.com
Hackers. Read more
A parent's remark led to a novel.
Novel about two parents who reluctantly install spyware on their 16-year-old son's computer . Read more

Vulnerabilities & Exploits
www.caughq.org
Kaminsky DNS Cache Poisoning Flaw Exploit. Read more
www.caughq.org
Kaminsky DNS Cache Poisoning Flaw Exploit for Domains. Read more

Tools:
www.f-secure.com
F-Secure Rescue CD 3.00. Read more
adeona.cs.washington.edu
Adeona is the first Open Source system for tracking the location of your lost or stolen laptop. Read more

News
www.securityfocus.com
Report: Small biz weak in cybersecurity. Read more
www.securityfocus.com
E-Gold pleads guilty to money laundering. Read more
www.securityfocus.com
Metasploit releases double-whammy for DNS. Read more
news.softpedia.com
Hacked Data Used by Korean Loan Sharks. Read more
www.theregister.co.uk
Austrian official fuels Skype backdoor rumours. Read more
www.vnunet.com
US government security data compromised. Read more
www.theregister.co.uk
Security shocker: 75% of US bank websites have flaws. Read more
www.securityfocus.com
Attackers' behavior builds better blacklists. Read more
www.securityfocus.com
Prosecutors criticized in pop-up porn case. Read more
www.pcworld.com
Oracle Issues Warning Over Dangerous WebLogic Flaw. Read more
www.denverpost.com
Missing 'spam king' kills self, family. Read more
www.theregister.co.uk
Google gives GMail always-on encryption. Read more
www.sundayherald.com
For sale on the web: your identity ... for just 10p. Read more
timesofindia.indiatimes.com
Hackers control the internet traffic. Read more
www.dslreports.com
TorrentSpy Hacker Spied on The Pirate Bay for MPAA. Read more
english.chosun.com
Police: 9 Mil. Stolen Files Traded by Loan Ring. Read more
www.vnunet.com
Oyster cracker vows to clone cards. Read more

21 July 2008
Guides, Papers, etc
honeyblog.org
Survival of the Fittest. Read more
isc.sans.org
Survival Time on the Internet. Read more
www.schneier.com
Defeating Encrypted and Deniable File Systems: TrueCrypt v5.1a and the Case of the Tattling OS and Applications. (pdf) Read more
securitylabs.websense.com
Reversing malware with oSpy. Read more
honeyblog.org
Fast-Flux Data. Read more
dsc.discovery.com
The Truth About Chinese Hackers. Read more
www.secureworks.com
Coreflood Removal for the Network Administrator. Read more
ddanchev.blogspot.com
Impersonating StopBadware.org to Serve Fake Security Warnings. Read more
ddanchev.blogspot.com
SQL Injecting Malicious Doorways to Serve Malware. Read more
ddanchev.blogspot.com
Money Mule Recruiters use ASProx's Fast Fluxing Services. Read more
ddanchev.blogspot.com
The Ayyildiz Turkish Hacking Group VS Everyone. Read more
ddanchev.blogspot.com
The Unbreakable CAPTCHA. Read more
ddanchev.blogspot.com
Obfuscating Fast-fluxed SQL Injected Domains. Read more
ddanchev.blogspot.com
The Neosploit Malware Kit Updated with Snapshot ActiveX Exploit. Read more
www.darkreading.com
Cybercrime, Cosa Nostra-Style. Read more
www.marshal.com
The Irresistible Angelina Jolie. Read more
msmvps.com
CNET hit by malvertizements. Read more
securitylabs.websense.com
Banker Analysis. Read more
www.f-secure.com
Snapshot Viewer for Microsoft Access. Read more
sunbeltblog.blogspot.com
IRS Stimulus package phish. Read more
sunbeltblog.blogspot.com
Another fake MS spam. Read more
sunbeltblog.blogspot.com
Julie Amero Petition. Read more
www.securityfocus.com
Blocking Traffic by Country on Production Networks. Read more
www.securityfocus.com
Video - Global Malware. Read more
www.avertlabs.com
Do you know cloaking? Read more
www.avertlabs.com
Ever put your CV on a job site? Read more
isc.sans.org
A twist in fluxnet operations. Enter Hydraflux. Read more
isc.sans.org
Exit process? Read more
isc.sans.org
Adobe Reader 9. Read more
isc.sans.org
Extracting scripts and data from suspect PDF files. Read more
www.darkreading.com
Microsoft Office Security Team Enlists Bots, Pen Tests. Read more
addxorrol.blogspot.com
All this DNS ... Read more
addxorrol.blogspot.com
On Dan's request for "no speculation please". Read more
blog.trendmicro.com
New YouTube Spam Dresses Malware as Porn. Read more
blog.trendmicro.com
Spam Spans New Artistic Heights. Read more
blog.trendmicro.com
YAMSIA (Yet Another Massive SQL Injection Attack). Read more
blog.trendmicro.com
�Angelina Jolie Nude Movie� Spam. Read more
www.prevx.com
GetCodec.A says hello to multimedia files. Read more
www.prevx.com
CPU Bug Attacks: Are they really necessary? Read more
bharath-m-narayan.blogspot.com
Malware distributing sites. Read more
bharath-m-narayan.blogspot.com
WinSpywareProtect. Read more
garwarner.blogspot.com
Russian Cybercrooks, CoreFlood, and the Amazing Joe Stewart. Read more
blog.wired.com
The Ghost in Your Machine: IPv6 Gateway to Hackers. Read more
www.smh.com.au
Hooking the crooks. Read more
www.benedelman.org
Competition among Sponsored Search Services. Read more
news.cnet.com
Protecting against Wi-Fi, Bluetooth, RFID data attacks. Read more
www.computerworld.com.au
12 ways to visualize network security. Read more
anti-virus-rants.blogspot.com
if i have a whitelist, do i still need AV? Read more
www.computerworld.com
Six hours to hack the FBI (and other pen-testing adventures). Read more
news.cnet.com
Social Engineering 101: Mitnick and other hackers show how it's done Read more
news.cnet.com
Listen to the 2600 hacker conference. Read more
www-static.cc.gatech.edu
BotSniffer: Detecting Botnet Command and Control Channels in Network Traffic. (pdf). Read more
atlas-public.ec2.arbor.net
Hitpop DDoS Malware Analysis (pdf). Read more
atlas-public.ec2.arbor.net
BlackEnergy DDoS Bot Analysis. Read more
evilcry.altervista.org
CartellaUnicaTasse.exe An Italian Malware Reverse Engineering Study. Read more
www.podtrac.com
Audio. Security Now 153: Bad Phorm. Listen

News
www.channelregister.co.uk
Unpatched Windows PCs own3d in less than four minutes. Read more
www.securityfocus.com
Mozilla shutters three Firefox flaws. Read more
www.securityfocus.com
Rogue admin blocks San Francisco network. Read more
fergdawg.blogspot.com
Certegy DBA Gets Jail Time For Data Thefts. Read more
www.securityfocus.com
Cybercrime gets busy getting organized. Read more
www.theregister.co.uk
Crooks charge premium for filter-evading Trojan. Read more
timesofindia.indiatimes.com
Hackers snoop on mobile phones. Read more
www.theregister.co.uk
Researchers show up deniable file system crypto leaks. Read more
www.usatoday.com
Russian Coreflood Gang targets online bank accounts. Read more
www.mediafax.ro
Romanian Authorities Arrest 24 Suspects In Internet Crime Frauds. Read more
www.computerworld.com.au
Hack a million systems - earn a job. Read more
www.thedarkvisitor.com
Chinese hacker Withered Rose returns. Read more
www.digitalhome.ca
Rogers violates net neutrality by hijacking failed DNS lookups. Read more
news.cnet.com
The Internet--a private eye's best friend. Read more

12 July 2008
Guides, Papers, etc
securosis.com
Dan Kaminsky Discovers Fundamental Issue In DNS: Massive Multivendor Patch Released. Read more
doxpara.com
Find out if the DNS server you use is vulnerable. Read more
www.securityfocus.com
An Astonishing Collaboration. Read more
www.f-secure.com
DNS and SQL Updates. Read more
www.courant.com
Let's End Teacher's Long Nightmare. Read more
sunbeltblog.blogspot.com
The Julie Amero situation, over one year later. Read more
www.wtic.com
Audio. On the radio: Rick Green on Julie Amero. Listen
sunbeltblog.blogspot.com
Osterman webcast on The Case for Server-based Messaging Security Solutions. Read more
blog.washingtonpost.com
Ghosts of Java Haunt Users. Read more
msmvps.com
The Sun Java installer still sucks.... Read more
isc.sans.org
And you thought the DNS issue was an old one... Read more
isc.sans.org
July 2008 black tuesday overview. Read more
ddanchev.blogspot.com
Violating OPSEC for Increasing the Probability of Malware Infection. Read more
ddanchev.blogspot.com
The Template-ization of Malware Serving Sites. Read more
ddanchev.blogspot.com
Mobile Malware Scam iSexPlayer Wants Your Money. Read more
ddanchev.blogspot.com
Storm Worm's U.S Invasion of Iran Campaign. Read more
ddanchev.blogspot.com
Fake Porn Sites Serving Malware - Part Two. Read more
ddanchev.blogspot.com
The Risks of Outdated Situational Awareness. Read more
ddanchev.blogspot.com
The ICANN Responds to the DNS Hijacking, Its Blog Under Attack. Read more
ddanchev.blogspot.com
The Antivirus Industry in 2008. Read more
msmvps.com
ALERT: Malvertizement featuring Skype. Read more
msmvps.com
ALERT: malvertizement featuring classmates.com. Read more
msmvps.com
ALERT: new malvertizement protocols, courtesy of Kimberley. Read more
msmvps.com
An interesting browser hijacking that I have not seen before... watch out for the "free" Geobytes Geoflag. Read more
www.darkreading.com
Disclosure Shouldn't Be a Leap of Faith. Read more
www.avertlabs.com
Are Internet cafes and bars in danger? Read more
www.avertlabs.com
Nuwar Back to War Games. Read more
www.darkreading.com
Trojan Attacks Multimedia Files Stored on Hard Drives. Read more
blogs.zdnet.com
Gmail, PayPal and Ebay embrace DomainKeys to fight phishing emails. Read more
blogs.zdnet.com
What happens when you patch the Internet? Read more
blogs.zdnet.com
The key to an open, transparent malware filtering system. Read more
blogs.zdnet.com
Approximately 800 vulnerabilities discovered in antivirus products. Read more
www.darkreading.com
FasTrak Toll Hacked, Exposing Privacy Dangers. Read more
anti-virus-rants.blogspot.com
the future of malware past. Read more
anti-virus-rants.blogspot.com
the malware plateau. Read more
blog.spywareguide.com
Homer Simpson and the Kimya Botnet. Read more
blog.spywareguide.com
Twitter Spam. Read more
blog.spywareguide.com
Malware Install Hides Behind Fake Blue Screen Of Death. Read more
www.eweek.com
Yes, Domain Tasting Will End. Read more
blogs.zdnet.com
Apple hasn�t learned from past security mistakes. Read more
www.eweek.com
How to Avoid Security Risks for Mobile Computing on Public WLANs. Read more
www.0x000000.com
Attacking ColdFusion. Read more
www.0x000000.com
URLANDEXIT. Read more
garwarner.blogspot.com/
Nuwar Looks for News Readers? Read more
blogs.paretologic.com
Bit by a dog with the plague. Read more
blogs.paretologic.com
Locked out of my desktop. Read more
bharath-m-narayan.blogspot.com
Update on Trojan-Downloader-CodecPack Distributing sites. Read more
bharath-m-narayan.blogspot.com
Trojan distributing sites. Read mor
bharath-m-narayan.blogspot.com
List of new Rogue security applications. Read more
www.narus.com
DNS Fix Causes Huge Surge in DNS traffic in the Internet. Read more
www.wired.com
How a Classic Man-in-the-Middle Attack Saved Colombian Hostages. Read more
honeyblog.org
Learning and Classification of Malware Behavior. (pdf) Read more
vil.nai.com
Vulnerabilities in AV software. (pdf) Read more
anti-virus-rants.blogspot.com
lies, damn lies, and statistics. Read more
www.thedarkvisitor.com
Chinese hacker soap opera. Read more
www.podtrac.com
Audio. Security Now 152: Listener Feedback 45. Listen
www.enterpriseitplanet.com
For Starters: Virtualization - Part 3. Read more

Vulnerabilities & Exploits
www.securityfocus.com
Microsoft Access Snapshot Viewer Exploited in Neosploit Wrapper. Read more

News
www.securityfocus.com
Alliance forms to fix DNS poisoning flaw. Read more
www.securityfocus.com
Bad-Code Blues. Read more
www.computerworld.com
DNS researcher convinces skeptics that bug is serious. Read more
www.theregister.co.uk
Shocker DNS spoofing vuln discovered three years ago by a student. Read more
www.theregister.co.uk
MS DNS patch snuffs net connection for ZoneAlarm users. Read more
blog.wired.com
Ameritrade Hack Settlement: $2 Per Victim, $1.8 Million for Lawyers. Read more
www.theregister.co.uk
Fears mount over missing Webroot founder. Read more
blog.wired.com
Hacker Sentenced to 2 Years for MySpace Cyberstalking. Read more
www.theregister.co.uk
File system killer leads police to wife's bones. Read more
www.theregister.co.uk
File system killer Reiser rejected 3-year sentence. Read more
www.theregister.co.uk
Malware authors declare start of World War III (again). Read more
www.theregister.co.uk
Zero day Word flaw exploited by Trojan. Read more
www.itnews.com.au
Homer Simpson accused of spreading malware. Read more
www.darkreading.com
Texas Bank Dumps Antivirus for Whitelisting. Read more
www.smh.com.au
When hackers converge. Reda more
www.itbinnovation.com
Forget CSI � Digital DNA Comes To A Computer Near You. Read more
www.theregister.co.uk
New York pressures more ISPs into child pornography crackdown. Read more

04 July 2008
Guides, Papers, etc
blogs.technet.com
Upcoming Update to Windows Update. Read more
blogs.technet.com
July 2008 Advance Notification. Read more
Understanding the Web browser threat:
Examination of vulnerable online Web browser populations and the "insecurity iceberg". Read more
www.securityfocus.com
Web surfers, it's time to patch. Read more
www.securityfocus.com
Internationalization of Malware. Read more
www.f-secure.com
Stormy fireworks. Read more
www.f-secure.com
Tibia: Part One. Read more
www.f-secure.com
Tibia: Part Two. Read more
isc.sans.org
New Opera v9.51 fixes couple of security issues. Read more
isc.sans.org
Detecting scripts in ASF files (part 2). Read more
ddanchev.blogspot.com
Gmail, Yahoo and Hotmail�s CAPTCHA Broken. Read more
ddanchev.blogspot.com
Chinese Bloggers Bypassing Censorship by Blogging Backward. Read more
ddanchev.blogspot.com
Decrypting and Restoring GPcode Encrypted Files. Read more
ddanchev.blogspot.com
Summarizing June's Threatscape. Read more
blogs.paretologic.com
Kit of the root (RootKit). Read more
www.avertlabs.com
Welcome to Virtual Worlds. Read more
www.avertlabs.com
The End of Exponential Malware Growth? Read more
www.avertlabs.com
Yet another Paypal phishing scam. Read more
garwarner.blogspot.com
Storm Worm Salutes Our Nation on the 4th! Read more
www.eweek.com
Who Is Running The Most Secure Browser? Read more
www.darkreading.com
Cracking Physical Identity Theft. Read more
www.darkreading.com
Ratting Out Vulnerabilities. Read more
www.darkreading.com
Security Researchers: Not the Enemy. Read more
blogs.authentium.com
The Insanity of Email and Malware. Read more
blog.assarbad.net
Getting rid of SSH brute forcers. Read more
www.computerworld.com
Expect iPhone, Fourth of July scams, security firm says. Read more
community.zdnet.co.uk
Beware Of Sneaky Services. Read more
lauren.vortex.com
Lesson From Viacom: How to Get YouTube Users to Hate Your Guts. Read more
ha.ckers.org
XSSFilter Released. Read more
ha.ckers.org
Searchable SWFs. Read more
msmvps.com
Oh goody. Another SWF display conduit to keep an eye on :o( Read more
honeyblog.org
Fast-Flux Techniques in .mobi. Read more
news.cnet.com
Video: Latest in Viacom-Google lawsuit raises questions. Watch
www.podtrac.com
Audio. Security Now 151: Frakking Phorm. Listen

Tools:
www.tm.uka.de
PktAnon - packet trace anonymization. Read more
code.google.com
ratproxy - passive web application security assessment tool. Read more

News
www.theregister.co.uk
Microsoft touts trustworthy browsing with IE8. Read more
www.theregister.co.uk
Built-in browser expiry proposed to fight botnet menace. Read more
www.upi.com
Analysis: U.S. military to patrol Internet. Read more
www.dailytech.com
YouTube Ordered to Give Complete User Logs to Viacom. Read more
www.asianews.it
Tehran plans to impose the death penalty on those guilty of cyber crimes. Read more
www.telegraph.co.uk
Hackers scam millions from stolen PIN codes. Read more
www.securityfocus.com
World of Warcraft to get bank-like security. Read more
www.theregister.co.uk
Scareware runs amok on PlayStation site. Read more
www.vnunet.com
Cyber-crooks celebrate independence. Read more
www.nebraska.tv
UNK Computers Hacked. Read more
community.zdnet.co.uk
The GoDaddy saga continues...Read more
honeyblog.org
Studying Malicious Websites and the Underground Economy on the Chinese Web. Read more