Search

A new edition of the notorious TDSS malware has been spotted using a domain generation algorithm (DGA) in communications with its command-and-control (C&C) as it spreads throughout enterprises. Also known [...]

A recent criminal attack on the network of app developer BlueToad likely led to the leak of a million device identifiers for iPhones and iPads, the company said in a [...]

A group of data thieves, possibly linked to a 2009 attack on Google, has ramped up its operations, using exploits for at least eight previously unknown vulnerabilities-widely referred to as [...]

VUPEN Security has detailed how to exploit a critical memory corruption vulnerability in Xen hypervisors to break out of virtual machines and execute code. The attack leverages a now-patched vulnerability [...]

While malicious software targeting mobile phones has surged, it's still a drop in the bucket compared with the horde of viruses, Trojan horses and rootkits that plague personal computers. For [...]

A malicious program, designed by cyber-criminals to help them build their botnets, is causing disruption at hundreds of small Websites as the program attempts to hide its communications by sending [...]

The number of new ransomware samples jumped roughly 50 percent between the first and second quarters of 2012, according to a new report from McAfee. Ransomware restricts access to infected [...]

A group of intellectual-property thieves has adopted the latest exploit for Java and continues to target companies in critical industries such as chemical manufacturing and defense, Symantec officials said Aug. [...]

The Mahdi malware publicized in July has now spread its list of targets to organizations in the United States. According to Seculert, since June, Mahdi has been able to successful [...]

Attackers are targeting a patched bug in Adobe Flash Player spread via malicious Microsoft Word documents. The attacks are focused on CVE-2012-1535, a remote code execution vulnerability that impacts Windows, [...]

Evidence has surfaced linking the Shamoon malware attack to group of hacktivists who claim that they are protesting oppression in the Arab world. Eugene Kaspersky, CEO of Kaspersky Lab, confirmed [...]

A computer virus that aims to infect Windows machines and steal data can also opportunistically infect Apple's Mac OS X and VMWare virtual machines, security firms said this week. The [...]

Seven risque wallpaper apps available through China's largest mobile marketplace, GFan, are actually Trojan horses, infecting Android smartphones by downloading malicious content after the applications are installed, mobile security firm [...]

A limited number of energy companies have been targeted with a destructive virus-dubbed Shamoon-that spreads through shared network drives and deletes important data from computers. The virus, which some are [...]

Researchers at Trusteer recently uncovered a variant of the Citadel Trojan targeting the virtual private network (VPN) credentials used by employees at a major airport. The firm would not disclose [...]

A number of things are known about the Gauss Trojan first discovered by the folks at Kaspersky Lab in the fall of 2011. We know that it's closely related to [...]

The complex piece of malware known as Gauss has a number of mysteries that have grabbed the attention of security researchers: Where did the attack tool originate, what is the [...]

Video game maker Blizzard Entertainment revealed Thursday its security team had discovered an 'unauthorized and illegal access' to its internal network Aug. 4. So far, there is no indication that [...]

A typical digital kidnapping often begins with the victim inadvertently running a malicious program. The ransomware, as such programs are called, then encrypts the computer hard drive and offers to [...]

As the Olympics go into Week Two in London, security experts are warning consumers seeking news on the events to beware of fraudsters that are attempting to sell anything from [...]

More than 200 unique families of malware have been used to eavesdrop on corporate and government employees, including attacks on the Japanese government, according to the results of a study [...]

By now, you are likely wondering why I'm talking about game theory when discussing mobile security. The reason came when I chaired a panel at the NetEvents Americas Press Summit [...]

Researchers at Seculert have uncovered what could be evidence of a link between the Mahdi malware and the infamous Flame malware discovered earlier this year. Though no strong connections have [...]

The distribution of unwelcome or dangerous emails was on the rise again in the first half of 2012, despite the fact that numerous spam-sending botnets have been shut down in [...]

A peer-to-peer botnet has infected more than 675,000 systems, including those at 14 of the top-20 Fortune 500 companies, according to research released July 25 at the Black Hat security [...]

Web exploit kits are getting more complex and harder to detect, and the cyber-criminals developing such toolkits as Blackhole and Phoenix are themselves becoming more sophisticated as they leverage a [...]

NEWS ANALYSIS: At the Black Hat 2012 conference scheduled for July 21-26 in Las Vegas, cybersecurity firms are sharing information on how to keep up with rapidly evolving threats. One [...]

LAS VEGAS - For millions of travelers and road warriors, the ubiquitous hotel key card is the primary, and essentially the only, way to access their rooms at the end [...]

One of the world's largest spamming botnets has been knocked out of commission-though it is unclear just how long the respite users may be seeing from spam will last. Grum, [...]

Online criminals are increasingly choosing to protect their botnets rather than using more effective denial-of-service attacks that potentially could reveal information about the makeup of their network of compromised computers, [...]

The underground developers behind the Blackhole exploit kit updated the framework the week of July 9 with a module that can easily compromise computers systems using a month-old flaw in [...]

The leak of nearly half a million passwords from Yahoo Voices underscores that many online providers have a ways to go before they can properly secure their users. The breach [...]

Nvidia and the Android Forum on the Phandroid Website are joining Yahoo as the latest organizations to have been hacked and user information compromised. On the heels of Yahoo executives [...]

A high percentage of businesses are unprepared for security threats and are using inefficient threat prevention tools such as vulnerability scanning, according to a survey released by security risk management [...]

Windows, Linux and Mac OS X are being targeted in a cross-platform malware attack, according to security experts. Researchers at F-Secure spotted the attack on a Colombian transport site. The [...]

Targeted attacks are on the rise, and while small businesses are increasingly victims, it is the largest companies that continue to be in the cross hairs of online criminals and [...]

Online criminals continue to improve their tactics for stealing money from banks and their customers. The evolving attacks now include more sophisticated Android malware that aims to capture the secret [...]

Researchers at mobile security firm TrustGo said they have uncovered a piece of Android malware in multiple app stores that has spread to more than 100,000 devices. It's yet another [...]

Two Internet security researchers who recently reported their findings of an Android botnet that pushes spam to users' Yahoo email accounts now say they might have jumped the gun. In [...]

Spammers have developed malware that is creating a botnet from Android mobile devices, the latest example of the explosive growth in attacks on Google's mobile operating system. According to a [...]

The cyber-criminals behind the Citadel Trojan may be pulling the malware off the cyber-world's public black markets, security researchers said. According to RSA's FraudAction Research Labs, a spokesperson for the [...]

Exploit kits are adopting a tactic more commonly found in botnet malware to make their attack campaigns more resilient-'pseudo-random domain generation.' Among the kits being associated with this activity is [...]

A group of sophisticated online thieves have modified two popular attack toolkits to help them succeed in a global crimes spree, stealing at least 60 million Euros-about $74 million U.S. [...]

An unsuccessful spear-phishing attempt against a company specializing in assessing industrial control systems is tied to a larger campaign believed to be emanating from China, security researchers say. Last week, [...]

A known weakness in the MD5 hash function gave the group behind the Flame malware an opportunity to forge a valid certificate for Microsoft's Windows Update service. Yet, while security [...]

Researchers at Kaspersky Lab have found what they believe is a direct link between Flame and the Stuxnet malware that was discovered targeting uranium centrifuges at Iran's nuclear facilities. According [...]

April and May were significant months for malware growth and increased spam and phishing attacks, as the volume of known malware swelled by more than a factor of 10, growing [...]

Security researchers have released new details showing that the Flame malware abused Microsoft's Windows Update mechanism to infect other computers through a man-in-the-middle attack. 'When a machine tries to connect [...]

The Flame malware, a sophisticated threat that appears to have targeted Iran and other Middle Eastern nations, is at least four years old, according to new research published June 4. [...]

Somewhat lost in the blizzard of coverage this week of the Flame malware that set upon Iranian computers was another cyber-weapon uncovered by Trend Micro that has hit businesses and [...]