Forbes recently released an article entitled “The Cybercrime Boom: It’s A Good Time to Be a Hacker”, and unless you are completely oblivious to the direction technology has been heading for the past several years now, you should agree that it is indeed, a good time to be a hacker. It seems like just about [...]
The Era of the Hacker By Miguel Brito, SOC Analyst
posted by CamillaM on November 10th, 2011 under Android smartphone
Duqu: A Breakdown, by Diego Ramirez, SOC Analyst
posted by CamillaM on October 25th, 2011 under Network Security, Security
Duqu is the latest worm making noise in security circles and main stream media. What’s interesting is how much we still don’t know about it. Even Virus/malware researchers at both Symantec and MacAfee can’t seem to agree specifically on the goal or exact purpose of Duqu. The alarming thing is not only its modular design [...]
The use of legitimate channels to distribute malicious software to users, by Rory Smith, SOC Analyst
posted by CamillaM on August 2nd, 2011 under Cloud Security, Managed Services, Network Security, Public Cloud, Security, Two-Factor Athentication, Virtual Private Cloud
With security companies recording known and popular domains used for spreading malicious software, malicious users are constantly looking for new channels to launch their illegal campaigns. A growing trend in the wild is the distribution of malicious code through legitimate domains. A recent victim to this kind of activity would be none other than Amazon [...]
A recent study on online advertising firms, by Miguel Brito, SOC analyst
posted by CamillaM on July 26th, 2011 under Security
According to a recent study released by the Stanford University Law School’s Center for Internet and Society, many online advertising networks do not comply with their privacy policies. This study, which is similar to a study conducted earlier this year by Carnegie Mellon University, focused on the actions of 64 of the 75 members of [...]
The Corporate Security Halftime Report: Corporations: 0 Hackers: over 9000! by Rory Smith, SOC Analyst
posted by CamillaM on June 23rd, 2011 under Network Security, Security
We are finally halfway through what seems to be one of the most active years in terms of cyber warfare. In the last six months we have seen a variety of industry giants fall prey to malicious attackers. Fox, Google, Lockheed Martin, HB Gary, Sony, PBS, Nintendo, CIA, RSA and the US Senate have been [...]
A New Method of Code Obfuscation, by Miguel Brito, SOC Analyst
posted by CamillaM on June 15th, 2011 under Network Security, Security
Code obfuscation is not really anything new. Malware authors are always on the lookout for new techniques to allow them to avoid detection by security products. Common exploit toolkits have even begun to use obfuscation to hide the methods they use to install malware on a victim’s Web site. Spammers also employ obfuscation and non-printing [...]
Rotten Apples, by Diego Ramirez, SOC Analyst
posted by CamillaM on June 14th, 2011 under Security
The cult of Mac has gotten a massive blow this past month as one of its tenants, “Macs don’t get viruses or malware”, was ripped to shreds with the advent of the Mac defender malware. Mac Defender is a type of malware (also referred to a scare-ware or hijack ware) in which software is installed [...]
“Cookiejacking” IE vulnerability, by Gabriel Bellas, SOC Analyst
posted by CamillaM on May 31st, 2011 under Facebook, Microsoft, Security
Just recently, we learned that an Italian IT professional by the name of Rosario Valotta discovered a vulnerability that affects every version of Microsoft’s Internet Explorer web browser. The vulnerability allows a malicious user the ability to steal cookies from a user’s web browser. Once stolen, the sky’s the limit with what can be done [...]
Trending: Trusted Sites have become Trusted Targets, by Joshua Roback, SOC Supervisor
posted by CamillaM on May 24th, 2011 under Security
Geek.com has been claimed as yet another target of website hijacking and the irony isn’t lost on anyone. The popular “techie” site joins the ranks of msn.com as an extremely popular, high traffic site that has unknowingly turned to the dark side. Reports indicate that geek.com has been serving malicious <iframe> scripts, unknowingly to site [...]
Facebook’s New Two-Factor Authentication Implementation, by Miguel Brito, SOC Analyst
posted by CamillaM on May 18th, 2011 under Facebook, Network Security, Security, Two-Factor Athentication
With all the recent data security breaches in the news, it seems that everyone is finally starting to realize the necessity of two-factor authentication in this day and age. Most recently, the social networking giant Facebook, announced their new implementation of a two-factor authentication method which they have dubbed “log-in approval”. The new implementation comes [...]
