Tag Archives: Malware

Surveillance spyware migrates from Windows to Mac OS X

Source: Dan Goodin, ars technica

Researchers have uncovered a malware-based espionage campaign that subjects Mac users to the same techniques that have been used for years to surreptitiously siphon confidential data out of Windows machines.

Richard Clarke says Stuxnet was a US Operation

Source: Jack Goldsmith, Lawfare

The former counterterrorism czar reaches this conclusion because the operation had lawyers’ fingerprints on it.

China targets Macs used by NGOs

Source: F-secure

A new Mac backdoor exploiting CVE-2011-3544 (a Java vulnerability) is being reported. The backdoor appears to be connected to GhostNet. The malware is being used in targeted attacks against non-governmental organizations (NGO).

Syrian activists targeted by fake YouTube

Source: Charles Arthur, The Guardian

Syrian activists are being targeted by a fake version of Google’s YouTube video site which plants malware on the PCs of people who leave comments on videos shown there, the Electronic Frontier Foundation has warned.

Activists in Iran and Syria targeted with malicious computer software

Source: Tor

In February 2012 we learned that activists in Iran and Syria were targeted with two different types of malicious computer software.

Cryptome hacked to infect visitors with malware

Source: Dan Goodin, Ars Technica

A breach that caused Cryptome.org to infect visitors with virulent malware was one of at least six attacks reported to hit high-profile sites or services in the past few days.

Chinese hackers suspected in long-term Nortel breach

Source: Siobhan Gorman, The Wall Street Journal

For nearly a decade, hackers enjoyed widespread access to the corporate computer network of Nortel Networks Ltd., a once-giant telecommunications firm now fallen on hard times.

Update by Trend Micro on PoisonIvy

Source:

Last year, the security industry was plagued by a series of APT reports, which included the “Nitro Attack”.

Top APT research of 2011(that you probably haven’t heard about)

Source: Nart Villeneuve, Trend Micro Malware blog

Throughout 2011, I am sure that you have heard of the compromise of RSA, in which the stolen data regarding RSA’s Secure ID appears to have been used in subsequent attacks and that there were many more victims other than RSA.

Microsoft names creator of Kelihos botnet

Source: Paul Thurrott, Supersite for Windows

Microsoft this week provided an update to its ongoing investigation of the Kelihos botnet case and now alleges that a Russian citizen is responsible for the creation and operation of the botnet.