Handler on Duty: Johannes Ullrich
Threat Level: green
Lenny Zeltser Diaries
- A Close Look at PayPal Overpayment Scams That Target Craigslist Sellers
- How Malware Campaigns Employ Google Redirects and Analytics
- Who Develops Code for IT Support Scareware Websites?
- How Victims Are Redirected to IT Support Scareware Sites
- The Mystery of a Session Cookie
- How Malware Generates Mutex Names to Evade Detection
- Web Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability
- Decoy Personas for Safeguarding Online Identity Using Deception
- System Glitch - Multiple New Diary Notifications
- Extracting Digital Signatures from Signed Malware
- It's a Dangerous Web Out There
- Fake Mandiant APT Report Used as Malware Lure
- Challenges of Anti-Phishing Advice, the Google Docs Edition
- Scam Report - Fake Voice Mail Email Notification Redirects to Malicious Site
- Analyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
- Decoding Common XOR Obfuscation in Malicious Code
- Why We Rated the MS12-020 Issue with RDP "Patch Now"
- March 2012 Microsoft Black Tuesday
- Please transfer this email to your CEO or appropriate person, thanks
- Adobe Acrobat Latest Zero-Day Vulnerability Fix Coming to All Platforms by January 10
- V8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
- How Makers of Web Browsers Include CAs in Their Products
- Analyzing Mobile Device Malware - Honeynet Forensic Challenge 9 and Some Tools
- GlobalSign Temporarily Stops Issuing Certificates to Investigate a Potential Breach
- What's The Deal With Bitcoin?
- Fake Epsilon Breach Warning Phishes for Credit Report Customers
- Monitoring Social Media for Security References to Your Organization
- How to uninstall Internet Explorer 9 if you need to revert to IE 8.
- Internet Explorer 9 is out, includes new security features.
- Limiting Exploit Capabilities by Using Windows Integrity Levels
- How Not to Respond to a Security Incident
- The Importance of HTTP Headers When Investigating Malicious Sites
- Adobe Acrobat Spam Going Strong - More to Come?
- Brand Impersonations On-Line: Brandjacking and Social Networks
- Targeting VoIP: Increase in SIP Connections on UDP port 5060
- Preempting a Major Issue Due to the LNK Vulnerability - Raising Infocon to Yellow
- Internet Explorer 9 "Platform Preview" Now Available From Microsoft
- Trouble Ticket Express Exploit in the Wild a Day After the Vulnerability Announcement
- Microsoft Announces Out-of-Band Security Bulletin for the IE Vulnerability
- Using Curl to Retrieve Malicious Websites
- When Rogue On-Line Pharmacies Take Over Forum Discussions
- Security Patch for for BIND 9.6.1 Released
- VMware Security Advisory: VMSA-2009-0015
- Cyber Security Awareness Month - Day 27 - Active Directory Ports
- Social Engineering in Real-World Computer Attacks
- Categories of Common Malware Traits
- Michael Jackson Spam Distributes Malware
- How Malware Defends Itself Using TLS Callback Functions
- How to be Heard? 10 Tips.
- DNS Providers Under Attack
- Three Laws of Behavior Dynamics for Information Security
- Free security awareness training on-line from InfraGard
- PowerPoint zero-day vulnerability (969136)
- Malware infection that began with windshield fliers
- Unexpected mass reboots are worth investigating
- How to Use Twitter for Information Mining
- Executives at a Swedish Company Targeted via an Email Attachment
- Active Scans for Roundcube Vulnerabilities
- A Worm Triggering Autolock - Another Sighting of W32.Downadup?
- Top 10 Mistakes When Crafting a Security RFP
- How to Suck at Information Security
- An Ad for DDoS Services - Network, Phone, Competition
- How to Handle DDoS Incidents? We're Looking for Tips.
- 2 Cheat Sheets for Incident Handling
- Are We Doomed?
- Security Awareness Training is Boring
- Scammers may use recorded snippets during voice phishing
- VMware releases updates - don't forget to patch
- Scams from today's mailbag
- When using fear to sell security can backfire
- SWOT matrix for describing security posture
- Elevator pitch for explaining security risks to executives
- Investigating fraudulent email and another Nigerian scam twist
- Competitive intelligence gathering via LinkedIn's new Company Profile pages
- The Battery and Security in Mobile Devices
- Tools for restoring a system's state
- How not to write a mass email to your customers.
- If site not apeared - Click Here
- Adobe AIR is out. Let's talk about security.
- How to authenticate customers on the phone?
- Cyber Security Awareness Tip #10: Authentication Mechanisms
- Vishing, Skype, and VoIP-Based Fraud
- Advice on Violating Corporate IT Policies from the Wall Street Journal
- Remote Password Guessing - Concerns, Observations, Recommendations
- Remote Password Guessing - Follow-up
- Fake Microsoft Security Bulletin -> Malicious Browser Add-On
- Possible FAA computer glitches?
- Scammers Use Social Networks for Increased Effectiveness
- People Will Click On Anything
- A Possible Data Breach at Romanian Finance Ministry
- Domain Appraisal Scam Targets Domain Name Owners
- Tracking Publicly-Announced Data Breaches
- Malware author wants to gain attention via Windows Live Messenger password stealer
- An Overview of the FreeVideo Player Trojan
- Taking a Look at the FreeVideo Player Trojan
- Virtual Machine Detection in Malware via Commercial Tools
- Weekend Vulnerability Roundup
- You know about XSS. How about XSRF/CSRF?
- Off-Site Backup for Home Users
- Early Discussions of Computer Security in the Media
- A Few Thoughts on the Recent MySpace Worm
- Behavioral Analysis of Rootkit Malware
- Hidden IFrame Remains Popular With Browse-By Exploit Authors
- Phishing Messages May Include Highly-Personalized Information
- Potential Risks of Personalized Portal Start Pages
- ActiveX Kill Bit Can Be Bypassed - Another Reason to Apply MS05-054?
- Detecting BlackWorm Without Signatures
- KbHook.dll is Not Always Spyware
- Online Security Scanner from Microsoft - Windows Live Safety Center
- Researching Information Security Issues
- Mambo Exploit Confirmed in the Wild
- Notes from the DShield Forum
- A TWiki Vulnerability Allows Remote Code Execution
- Another Phishing Trick; More Osama Messages; Crunchy-Gooey Security Designs
- phpBB Update; Potential IE Vulnerability; Update Rollup for Win2k; Updated Package Installer for WinXP
- Botnets Host DNS; 'leet Names and Security Tools
- Security Updates from Microsoft; Multiple Vendors - ICMP Affecting TCP Sessions
- New Beagle/Bagle-Related Malware Variants; A Note from David Litchfield
- * Microsoft Releases 8 Critical Security Patches, etc.
- Window Injection Vulnerability in Browsers/Request for Specific UDP Fragment Data
- New Sober Variant, Compromised Servers Deliver Spy/Adware?, Phishing Reports, No Honor Among Thieves II
- New Bagle/Beagle Variants, Fragmentation Attacks, Gmail XSS Hole
- Manager's Briefing for Microsoft Security Bulletins, MS04-036 Exploit Code, VERITAS Security Patch, Comxt Alternate Data Stream Trojan
- * A Critical IE Patch Released / Why the Internet is Like an Elephant
- Microsoft Security Patches, VBS/Inor Trojan Variant, Phrack 62 Release, BHODemon Mirror
- Time to update Mozilla/Firefox/Thunderbird and Ethereal; also: sightings of infected IIS 6 servers.
- Akamai/Internet DNS Problems (Updated), Exploitation of IE URL Spoofing, MS Re-Releases NT 4.0 Patch, ISC Site Under Heavy Load
