Threat Level: Infocon green

Diaries by Keyword: antivirus 2009 fake av

DateAuthorTitle

ANTIVIRUS 2009 FAKE AV

2008-09-15donald smithFake antivirus 2009 and search engine results

ANTIVIRUS

2012-11-02Daniel WesemannThe shortcomings of anti-virus software
2012-04-26Richard PorterDefine Irony: A medical device with a Virus?
2011-06-02Johannes UllrichSome Insight into Apple's Anti-Virus Signatures
2011-03-17Kevin ListonSo You Got an AV Alert. Now What?
2011-03-09Kevin ShorttAVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-03-01Daniel WesemannAV software and "sharing samples"
2010-05-26Bojan ZdrnjaMalware modularization and AV detection evasion
2009-09-25Lenny ZeltserCategories of Common Malware Traits
2009-09-17Bojan ZdrnjaWhy is Rogue/Fake AV so successful?
2009-08-29Guy BruneauImmunet Protect - Cloud and Community Malware Protection
2009-08-19Daniel WesemannChecking your protection
2009-08-13Johannes UllrichCA eTrust update crashes systems
2008-09-15donald smithFake antivirus 2009 and search engine results
2006-10-30William SaluskyToD - Configuration Management - maintaining security awareness

2009

2010-01-12Adrien de BeauprePoC for CVE-2009-0689 MacOS X 10.5/10.6 vulnerability
2010-01-04Bojan ZdrnjaSophisticated, targeted malicious PDF documents exploiting CVE-2009-4324
2009-10-31Rick WannerCyber Security Awareness Month - Day 31, ident
2009-10-30Rob VandenBrinkCyber Security Awareness Month - Day 30 - The "Common" IPSEC VPN Protocols - IKE / ISAKMP (500/udp), ESP (IP Protocol 50), NAT-T-IKE (500/udp, 4500/udp), PPTP (tcp/1723), GRE (IP Protocol 47)
2009-10-29Kyle HaugsnessCyber Security Awareness Month - Day 29 - dns port 53
2009-10-25Lorna HutchesonCyber Security Awareness Month - Day 25 - Port 80 and 443
2009-10-22Adrien de BeaupreCyber Security Awareness Month - Day 22 port 502 TCP - Modbus
2009-10-19Daniel WesemannCyber Security Awareness Month - Day 19 - ICMP
2009-10-17Rick WannerCyber Security Awareness Month - Day 17 - Port 22/SSH
2009-10-16Adrien de BeaupreCyber Security Awareness Month - Day 16 - Port 1521 - Oracle TNS Listener
2009-10-09Rob VandenBrinkCyber Security Awareness Month - Day 9 - Port 3389/tcp (RDP)
2009-10-06Adrien de BeaupreCyber Security Awareness Month - Day 6 ports 67&68 udp - bootp and dhcp
2009-10-05Adrien de BeaupreCyber Security Awareness Month - Day 5 port 31337
2009-06-20Mark HofmanG'day from Sansfire2009
2009-06-14Guy BruneauSANSFIRE 2009 Starts Tomorrow
2009-05-28Stephen HallMicrosoft DirectShow vulnerability
2008-09-15donald smithFake antivirus 2009 and search engine results

FAKE

2013-04-29Adam SwangerReport Fake Tech Support Calls submission form reminder
2013-04-16John BambenekFake Boston Marathon Scams Update
2013-01-03Manuel Humberto Santander PelaezNew year and new CA compromised
2012-12-06Daniel WesemannFake tech support calls - revisited
2012-10-03Kevin ShorttFake Support Calls Reported
2012-06-19Daniel Wesemann Vulnerabilityqueerprocessbrittleness
2011-07-25Bojan ZdrnjaWhen the FakeAV coder(s) fail
2011-07-21Daniel WesemannDown the FakeAV rabbit hole
2011-05-19Daniel WesemannFake AV Bingo
2011-05-04Bojan ZdrnjaMore on Google image poisoning
2011-01-18Daniel WesemannYet another rogue anti-virus
2010-11-11Daniel WesemannFake AV scams via Skype Chat
2010-02-27Johannes UllrichSearch Engine Poisoning: Chile Earthquake
2010-02-15Johannes UllrichVarious Olympics Related Dangerous Google Searches
2010-02-08Adrien de BeaupreWhen is a 0day not a 0day? Fake OpenSSh exploit, again.
2010-01-08Rob VandenBrinkMicrosoft OfficeOnline, Searching for Trust and Malware
2009-09-17Bojan ZdrnjaWhy is Rogue/Fake AV so successful?
2009-09-04Adrien de BeaupreFake anti-virus
2009-02-06Adrien de BeaupreFake stimulus payments
2008-09-15donald smithFake antivirus 2009 and search engine results

AV

2013-04-23Russ McReeMicrosoft's Security Intelligence Report (SIRv14) released
2013-04-19Russ McReeJava 8 release schedule delayed for renewed focus on security
2013-04-16Rob VandenBrinkJava 7 Update 21 is available - Watch for Behaviour Changes !
2013-03-07Guy BruneauApple Blocking Java Web plug-in
2013-03-05Richard PorterJava j6u43 update #YAJU http://www.oracle.com/technetwork/java/javase/6u43-relnotes-1915290.html
2013-03-04Richard PorterJava 7u17 update #YAJU http://www.oracle.com/technetwork/java/javase/7u17-relnotes-1915289.html
2013-03-01Jim ClausingAnd the Java 0-days just keep on coming
2013-02-26Rob VandenBrinkAll I need Java for is ....
2013-02-25Johannes UllrichTrustwave Trustkeeper Phish
2013-02-20Johannes UllrichUpdate Palooza
2013-02-19Johannes UllrichOracle Updates Java (Java 7 Update 15, Java 6 update 41)
2013-02-12Swa FrantzenAdobe Feb 2013 Black Tuesday patches
2013-02-08Kevin ShorttIs it Spam or Is it Malware?
2013-02-01Jim ClausingOracle quitely releases Java 7u13 early
2013-01-19Guy BruneauJava 7 Update 11 Still has a Flaw
2013-01-15Rob VandenBrinkWhen Disabling IE6 (or Java, or whatever) is not an Option...
2013-01-13Stephen HallJava 0-Day patched as Java 7 U 11 released
2013-01-12Stephen HallJava 0-day impact to Java 6 (and beyond?)
2013-01-10Johannes UllrichJava is still exploitable and is likely going to remain so.
2012-11-01Daniel WesemannPatched your Java yet?
2012-10-18Rob VandenBrinkAnother Java update! Java SE 1.6.0_37 Available ==> http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
2012-10-17Rob VandenBrinkTime to update - Java version 7 update 9 (JRE 7u9, JDK 7u9) is out! Release notes here - http://www.oracle.com/technetwork/java/javase/7u9-relnotes-1863279.html
2012-09-01Russ McReeBlackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-31Russ McReeNot so fast: Java 7 Update 7 critical vulnerability discovered in less than 24 hours
2012-08-27Kevin ListonQuick Bits about Today's Java 0-Day
2012-08-05Daniel WesemannPhishing for Payroll with unpatched Java
2012-06-25Guy BruneauUsing JSDetox to Analyze and Deobfuscate Javascript
2012-06-19Daniel Wesemann Vulnerabilityqueerprocessbrittleness
2012-06-12Swa FrantzenJava 7u5 and 6u33 released
2012-05-22Johannes Ullrichnmap 6 released
2012-05-16Johannes UllrichAvira Antivirus false positives http://forum.avira.com/wbb/index.php?page=Thread&threadID=144875
2012-04-25Daniel WesemannBlacole's obfuscated JavaScript
2012-04-12Guy BruneauApple Java Updates for Mac OS X
2012-04-06Johannes UllrichAnother OS X Java Patch
2012-03-25Daniel Wesemannevilcode.class
2012-02-16Tony CarothersJava Update for February
2012-02-14Johannes UllrichAdobe Shockwave Player and RoboHelp for Word Patches
2012-01-22Johannes UllrichJavascript DDoS Tool Analysis
2012-01-03Bojan ZdrnjaThe tale of obfuscated JavaScript continues
2011-12-12Daniel WesemannJava 6u30 released
2011-12-10Daniel WesemannUnwanted Presents
2011-12-07Lenny ZeltserV8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-10-22Guy BruneauOracle Java SE Critical Patch Update
2011-09-05Raul SilesJava 7 Officially Released
2011-08-19Kevin ShorttJava SE 6 Update 27 released. No security updates, many bug fixes ==> http://www.oracle.com/technetwork/java/javase/6u27-relnotes-444147.html
2011-07-28Guy BruneauJava 7.0 released. Get it here - http://blogs.oracle.com/javase/entry/java_7_has_released
2011-07-25Bojan ZdrnjaWhen the FakeAV coder(s) fail
2011-07-21Daniel WesemannDown the FakeAV rabbit hole
2011-06-28Johannes UllrichUpdate: Java update for OS X fixes security issues http://support.apple.com/kb/HT1222
2011-06-13Bojan ZdrnjaHarry Potter and the Rogue anti-virus: Part 1
2011-06-07Johannes UllrichOracle Releases Java Version 1.6.0.26 http://java.com/en/download/manual.jsp
2011-06-06Manuel Humberto Santander PelaezPhishing: Same goal, same techniques and people still falling for such scams
2011-06-06Johannes UllrichThe Havij SQL Injection Tool
2011-06-03Guy BruneauOracle Java SE Critical Patch Update Pre-Release Announcement - June 2011
2011-05-19Daniel WesemannFake AV Bingo
2011-05-04Bojan ZdrnjaMore on Google image poisoning
2011-05-01Deborah HaleJava 6.25 Is Now Available
2011-04-23Manuel Humberto Santander PelaezImage search can lead to malware download
2011-03-27Guy BruneauStrange Shockwave File with Surprising Attachments
2011-03-14Bojan ZdrnjaTsunami in Japan and self modifying RogueAV code
2011-03-09Jim ClausingApple updates Java
2011-03-09Kevin ShorttAVG Anti-Virus 2011 False Positives - Luhe.Exploit.PDF.B
2011-02-15Jason LamOracle Java 6 Update 24
2011-02-09Mark HofmanAdobe Patches (shockwave, Flash, Reader & Coldfusion)
2011-02-09Mark HofmanJava Floating point issue (CVE-2010-4476)
2011-02-07Pedro BuenoThe Good , the Bad and the Unknown Online Scanners
2011-02-04Daniel WesemannOh, just click "yes"
2011-01-18Daniel WesemannYet another rogue anti-virus
2010-12-29Daniel WesemannBeware of strange web sites bearing gifts ...
2010-12-24Daniel WesemannA question of class
2010-12-23Mark HofmanOlder AV Scam Active again.
2010-12-08Rob VandenBrinkJava 6, Update 23 is out => http://java.sun.com/javase/6/webnotes/ReleaseNotes.html , http://www.oracle.com/technetwork/java/javase/6u23releasenotes-191058.html , http://www.oracle.com/technetwork/java/javase/2col/6u23bugfixes-191074.html
2010-12-03Mark HofmanAVG Update Bricking windows 7 64 bit
2010-12-02Kevin JohnsonRobert Hansen and our happiness
2010-11-11Daniel WesemannJava Exploits
2010-10-30Guy BruneauSecurity Update for Shockwave Player
2010-08-25Pedro BuenoAdobe released security update for Shockwave player that fix several CVEs: APSB1020
2010-08-17Bojan ZdrnjaDo you like Bing? So do the RogueAV guys!
2010-07-21Adrien de BeaupreUpdate on .LNK vulnerability
2010-07-20Manuel Humberto Santander PelaezLNK vulnerability now with Metasploit module implementing the WebDAV method
2010-07-18Manuel Humberto Santander PelaezNew metasploit GUI written in Java
2010-07-04Manuel Humberto Santander PelaezMalware inside PDF Files
2010-07-01Bojan ZdrnjaDown the RogueAV and Blackhat SEO rabbit hole (part 2)
2010-06-29donald smithInteresting idea to help prevent RogueAV from using SEO without being noticed:)
2010-06-28Bojan ZdrnjaDown the RogueAV and Blackhat SEO rabbit hole
2010-05-23Manuel Humberto Santander PelaezOracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability
2010-05-12Rob VandenBrinkAdobe Shockwave Update
2010-04-14Mark HofmanClamAV 0.94 EOL Reminder
2010-04-10Andre LudwigNew bug/exploit for javaws
2010-04-02Guy BruneauOracle Java SE and Java for Business Critical Patch Update Advisory
2010-03-05Kyle HaugsnessJavascript obfuscators used in the wild
2010-02-27Johannes UllrichSearch Engine Poisoning: Chile Earthquake
2010-01-14Bojan ZdrnjaRogue AV exploiting Haiti earthquake
2010-01-13Guy BruneauSun Java JRE 6 Update 18 Released
2010-01-08Rob VandenBrinkMicrosoft OfficeOnline, Searching for Trust and Malware
2009-12-05Guy BruneauJava JRE Buffer and Integer Overflow
2009-12-03Mark HofmanAvast false positives
2009-11-13Adrien de BeaupreConficker patch via email?
2009-11-03Bojan ZdrnjaAdobe released Shockwave Player 11.5.2.602 which fixes several critical security vulnerabilities
2009-09-08Guy BruneauBug Fixes in Sun SDK 5 and Java SE 6
2009-08-04donald smithJava Security Update
2009-07-15Bojan ZdrnjaMake sure you update that Java
2009-07-01Bojan ZdrnjaMobile phone trojans
2009-06-10Swa FrantzenJava 6 update 14 released
2009-05-27donald smithWebDAV write-up
2009-05-24Raul SilesIIS admins, help finding WebDAV remotely using nmap
2009-05-22Mark HofmanPatching and Apple - Java issue
2009-05-21Adrien de BeaupreIIS admins, help finding WebDAV
2009-05-10Mari NicholsIs your Symantec Antivirus Alerting working correctly?
2009-05-04Tom ListonAdobe Reader/Acrobat Critical Vulnerability
2009-04-07Bojan ZdrnjaAdvanced JavaScript obfuscation (or why signature scanning is a failure)
2009-04-02Bojan ZdrnjaJavaScript insertion and log deletion attack tools
2009-03-25David GoldsmithJava Runtime Environment 6.0 Update 13 Released
2009-02-25Andre LudwigAdobe Acrobat pdf 0-day exploit, No JavaScript needed!
2009-02-10Swa FrantzenJava up to date ?
2008-11-02Adrien de BeaupreDaylight saving time
2008-09-15donald smithFake antivirus 2009 and search engine results
2008-08-10Stephen HallFrom lolly pops to afterglow
2008-07-14Daniel WesemannObfuscated JavaScript Redux
2008-07-09Johannes UllrichJava Update
2008-06-30Marcus SachsMore SQL Injection with Fast Flux hosting
2008-05-20Raul SilesJava 6 Update 6 has been released
2008-05-20Raul SilesList of malicious domains inserted through SQL injection
2008-04-06Daniel WesemannAdvanced obfuscated JavaScript analysis
2008-04-03Bojan ZdrnjaMixed (VBScript and JavaScript) obfuscation
site/port/ip search:

Announcement!

IPv6 Support Added

Our iptables client now supports submitting IPv6 firewall logs.

Get ISC Swag!!

Advertisement

Security News Feeds

InternetStormCenter
SANS Newsbites
SANS @Risk

Diary Archives

e-netprotections.su ? - by: Daniel Wesemann (2013-05-17)

SSL: Another reason not to ignore IPv6 - by: Johannes Ullrich (2013-05-17)

Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability - by: Joel Esler (2013-05-16)

View Diary Archives

Search Diaries:

SANS Institute

View our Privacy Policy

Contact Us

Phone: (757) SANS-ISC (726-7472) - Voice Mail Only
Web Contact: handlers@isc.sans.edu
Report Bugs: Sourceforge Project
Debug Info: Browser Debug Info

"The experiences gained in the SANS Technology Institute program have helped me advance in IBM, taking a more public facing role."
- Jerome Radcliffe, SANS Technology Institute Student

"SANS is a 'giving back to the community factory.' SANS encourages and fosters growing security awareness and growing the security community."
- Rob VandenBrink, Alumni of SANS Technology Institute