Threat Level: green Handler on Duty: Rick Wanner

SANS ISC Diaries by Keyword


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
DateAuthorTitle

GREETING CARDS PHISH MALWARE

2009-12-16Rob VandenBrinkBeware the Attack of the Christmas Greeting Cards !

GREETING

2011-12-25/a>Deborah HaleMerry Christmas, Happy Holidays
2009-12-16/a>Rob VandenBrinkBeware the Attack of the Christmas Greeting Cards !
2008-06-01/a>Mark HofmanFree Yahoo email account! Sign me up, Ok well maybe not.

CARDS

2014-11-24/a>Richard PorterSomeone is using this? PoS: Compressor
2014-07-03/a>Johannes UllrichCredit Card Processing in 700 Words or Less
2009-12-16/a>Rob VandenBrinkBeware the Attack of the Christmas Greeting Cards !
2009-07-28/a>Adrien de BeaupreYYAMCCBA
2008-06-01/a>Mark HofmanFree Yahoo email account! Sign me up, Ok well maybe not.

PHISH

2015-02-20/a>Tom WebbFast analysis of a Tax Scam
2015-01-31/a>Guy BruneauBeware of Phishing and Spam Super Bowl Fans!
2014-09-16/a>Daniel Wesemannhttps://yourfakebank.support -- TLD confusion starts!
2014-03-27/a>Alex StanfordApple Credential Phishing via appleidconfirm.net
2014-01-24/a>Johannes UllrichHow to send mass e-mail the right way
2014-01-24/a>Chris MohanPhishing via Social Media
2013-12-21/a>Daniel WesemannAdobe phishing underway
2013-12-11/a>Johannes UllrichFacebook Phishing and Malware via Tumblr Redirects
2013-10-17/a>Adrien de BeaupreMicrosoft phish
2013-08-05/a>Chris MohanDMARC: another step forward in the fight against phishing?
2013-05-21/a>Adrien de BeaupreMoore, Oklahoma tornado charitable organization scams, malware, and phishing
2013-03-29/a>Chris MohanDoes your breach email notification look like a phish?
2012-12-06/a>Daniel WesemannFake tech support calls - revisited
2012-12-03/a>John BambenekJohn McAfee Exposes His Location in Photo About His Being on Run
2012-11-29/a>Kevin ShorttNew Apple Security Update: APPLE-SA-2012-11-29-1 Apple TV 5.1.1
2012-11-28/a>Mark HofmanMcAfee releases extraDAT for W32/Autorun.worm.aaeb-h
2012-11-28/a>Mark HofmanNew version of wireshark is available (1.8.4), some security fixes included.
2012-11-27/a>Chris MohanCan users' phish emails be a security admin's catch of the day?
2012-11-26/a>John BambenekOnline Shopping for the Holidays? Tips, News and a Fair Warning
2012-11-20/a>John BambenekBehind the Random NTP Bizarreness of Incorrect Year Being Set
2012-11-20/a>John BambenekFirefox v 17.0 just released, more here: http://www.mozilla.org/en-US/firefox/17.0/releasenotes/
2012-11-19/a>John BambenekMoneyGram fined $100 million for aiding wire fraud - http://krebsonsecurity.com/2012/11/moneygram-fined-100-million-for-wire-fraud/
2012-11-19/a>John BambenekNew Poll: Top 5 Unresolved Security Problems of 2012
2012-11-17/a>Manuel Humberto Santander PelaezNew Sysinternal Updates: AdExplorer v1.44, Contig v1.7, Coreinfo v3.2, Procdump v5.1. See http://blogs.technet.com/b/sysinternals/archive/2012/11/16/updates-adexplorer-v1-44-contig-v1-7-coreinfo-v3-2-procdump-v5-1.aspx?Redirected=true
2012-11-12/a>John BambenekRequest for info: Robocall Phishing Against Local/Regional Banks
2012-11-09/a>Mark BaggettRemote Diagnostics with PSR
2012-11-09/a>Mark BaggettFresh batch of Microsoft patches next week
2012-11-08/a>Daniel WesemannGet a 40% discount on your hotel room!
2012-11-07/a>Mark BaggettHelp eliminate unquoted path vulnerabilities
2012-11-07/a>Mark BaggettMultiple 0-Days Reported!
2012-11-07/a>Mark BaggettCisco TACACS+ Authentication Bypass
2012-11-05/a>Johannes UllrichReminder: Ongoing SMTP Brute Forcing Attacks
2012-11-05/a>Johannes UllrichPossible Fake-AV Ads from Doubleclick Servers
2012-11-04/a>Lorna HutchesonWhat's important on your network?
2012-10-31/a>Johannes UllrichCyber Security Awareness Month - Day 31 - Business Continuity and Disaster Recovery
2012-10-30/a>Johannes UllrichHurricane Sandy Update
2012-10-30/a>Richard PorterSplunk 5.0 SP-CAAAHB4 http://www.splunk.com/view/SP-CAAAHB4
2012-10-28/a>Tony CarothersFirefox 16.02 Released
2012-10-26/a>Russ McReeCyber Security Awareness Month - Day 26 - Attackers use trusted domain to propagate Citadel Zeus variant
2012-10-25/a>Richard PorterCyber Security Awareness Month - Day 25 - Pro Audio & Video Packets on the Wire
2012-10-24/a>Russ McReeOngoing Windstream outage in the midwest - https://twitter.com/search?q=windstream
2012-10-21/a>Johannes UllrichCyber Security Awareness Month - Day 22: Connectors
2012-10-21/a>Lorna HutchesonPotential Phish for Regular Webmail Accounts
2012-10-19/a>Johannes UllrichCyber Security Awareness Month - Day 19: Standard log formats and CEE.
2012-10-18/a>Rob VandenBrinkCyber Security Awareness Month - Day 18 - Vendor Standards: The vSphere Hardening Guide
2012-10-17/a>Mark HofmanNew Acrobat release (including reader) available. Version 11. Some security improvements more here -->http://blogs.adobe.com/adobereader/
2012-10-16/a>Richard PorterCyberAwareness Month - Day 15, Standards Body Soup (pt2), Same Soup Different Cook.
2012-10-16/a>Johannes UllrichCyber Security Awareness Month - Day 16: W3C and HTML
2012-10-14/a>Pedro BuenoCyber Security Awareness Month - Day 14 - Poor Man's File Analysis System - Part 1
2012-10-09/a>Johannes UllrichMicrosoft October 2012 Black Tuesday Update - Overview
2012-10-07/a>Tony CarothersCyber Security Awareness Month - Day 7 - Rollup Review of CSAM Week 1
2012-10-05/a>Johannes UllrichCyber Security Awareness Month - Day 5: Standards Body Soup, So many Flavors in the bowl.
2012-10-05/a>Richard PorterVMWare Security Advisory: VMSA-2012-0014 - http://www.vmware.com/security/advisories/VMSA-2012-0014.html
2012-10-05/a>Richard PorterReports of a Distributed Injection Scan
2012-10-04/a>Mark HofmanAnd the SHA-3 title goes to .....Keccak
2012-10-03/a>Kevin ShorttFake Support Calls Reported
2012-10-02/a>Russ McReeCyber Security Awareness Month - Day 2 - PCI Security Standard: Mobile Payment Acceptance Security Guidelines
2012-10-01/a>Johannes UllrichCyber Security Awareness Month
2012-09-28/a>Joel EslerAdobe certification revocation for October 4th
2012-09-26/a>Johannes UllrichSome Android phones can be reset to factory default by clicking on links
2012-09-26/a>Johannes UllrichMore Java Woes
2012-09-21/a>Johannes UllrichiOS 6 Security Roundup
2012-09-20/a>Russ McReeFinancial sector advisory: attacks and threats against financial institutions
2012-09-19/a>Russ McReeScript kiddie scavenging with Shellbot.S
2012-09-17/a>Rob VandenBrinkWhat's on your iPad?
2012-09-14/a>Lenny ZeltserScam Report - Fake Voice Mail Email Notification Redirects to Malicious Site
2012-09-13/a>Mark BaggettTCP Fuzzing with Scapy
2012-09-13/a>Mark BaggettMicrosoft disrupts traffic associated with the Nitol botnet
2012-09-13/a>Mark BaggettMore SSL trouble
2012-09-10/a>Johannes UllrichMicrosoft Patch Tuesday Pre-Release
2012-09-10/a>Johannes UllrichGodaddy DDoS Attack
2012-09-09/a>Guy BruneauPhishing/Spam Pretending to be from BBB
2012-09-06/a>Johannes UllrichSSL Requests sent to port 80 (request for help/input)
2012-09-04/a>Johannes UllrichAnother round of "Spot the Exploit E-Mail"
2012-09-01/a>Russ McReeBlackhole targeting Java vulnerability via fake Microsoft Services Agreement email phish
2012-08-30/a>Johannes UllrichEditorial: The Slumlord Approach to Network Security http://isc.sans.edu/j/editorial
2012-08-29/a>Johannes Ullrich"Data" URLs used for in-URL phishing
2012-08-27/a>Johannes UllrichThe Good, Bad and Ugly about Assigning IPv6 Addresses
2012-08-27/a>Johannes UllrichMalware Spam harvesting Facebook Information
2012-08-26/a>Lorna HutchesonWho ya gonna contact?
2012-08-22/a>Adrien de BeaupreApple Remote Desktop update fixes no encryption issue
2012-08-22/a>Adrien de BeauprePhishing/spam via SMS
2012-08-21/a>Adrien de BeaupreYYABCAFU - Yes Yet Another Bleeping Critical Adobe Flash Update
2012-08-21/a>Adrien de BeaupreRuggedCom fails key management 101 on Rugged Operating System (ROS)
2012-08-20/a>Manuel Humberto Santander PelaezDo we need test procedures in our companies before implementing Antivirus signatures?
2012-08-19/a>Manuel Humberto Santander PelaezAuthentication Issues between entities during protocol message exchange in SCADA Systems
2012-08-17/a>Guy BruneauSuspicious eFax Spear Phishing Messages
2012-08-12/a>Tony CarothersLayers of the Defense-in-Depth Onion
2012-08-12/a>Tony CarothersOracle Security Alert for CVE-2012-3132
2012-08-09/a>Mark HofmanZeus/Citadel variant causing issues in the Netherlands
2012-08-09/a>Mark HofmanSQL Injection Lilupophilupop style, Part 2
2012-08-07/a>Adrien de BeaupreWho protects small business?
2012-08-04/a>Kevin ListonVendors: More Patch-Release Options Please
2012-07-27/a>Daniel WesemannCuckoo 0.4 is out - cool new features for malware analysis http://www.cuckoosandbox.org/
2012-07-24/a>Richard PorterWireshark 1.8.1 Released http://www.wireshark.org/
2012-07-24/a>Richard PorterReport of spike in DNS Queries gd21.net
2012-07-20/a>Mark BaggettSyria Internet connection cut?
2012-07-19/a>Mark BaggettDiagnosing Malware with Resource Monitor
2012-07-19/a>Mark BaggettA Heap of Overflows?
2012-07-16/a>Richard PorterSysinternals Update @ http://blogs.technet.com/b/sysinternals/archive/2012/07/16/updates-handle-v3-5-process-explorer-v15-22-process-monitor-v3-03-rammap-v1-21-zoomit-v4-3.aspx
2012-07-13/a>Richard PorterYesterday (not as on the ball as Rob) at SANSFire
2012-07-13/a>Russ McRee2 for 1: SANSFIRE & MSRA presentations
2012-07-12/a>Rick WannerCisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
2012-07-12/a>Rick WannerCisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
2012-07-12/a>Rick WannerCisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
2012-07-12/a>Rick WannerCisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
2012-07-09/a>Manuel Humberto Santander PelaezInternet Storm Center panel tonight at SANSFIRE 2012!
2012-07-09/a>Johannes UllrichThe FBI will turn off the Internet on Monday (or not)
2012-07-05/a>Adrien de BeaupreNew OS X trojan backdoor MaControl variant reported
2012-07-02/a>Joel EslerA rough guide to keeping your website up
2012-07-02/a>Joel EslerLinux & Java leap second bug
2012-06-29/a>Jim ClausingUpdated SysInternals tools - Autoruns, Process Explorer, Process Monitor, PSKill -- http://blogs.technet.com/b/sysinternals/archive/2012/06/28/updates-autoruns-v11-32-process-explorer-v15-21-process-monitor-v3-02-pskill-v1-15-rammap-v1-2.aspx
2012-06-21/a>Russ McReeWireshark 1.8.0 released 21 JUN 2012 http://www.wireshark.org/download.html
2012-06-19/a>Daniel Wesemann Vulnerabilityqueerprocessbrittleness
2012-06-14/a>Johannes UllrichSpot the Phish: Verizon Wireless
2012-06-10/a>Scott FendleyPreying on Users After Major Security Incidents
2012-05-30/a>Rob VandenBrinkIt's Phishing Season! In fact, it's ALWAYS Phishing Season!
2012-02-17/a>Mark HofmanIntersting Facebook SPAM
2011-08-31/a>Johannes UllrichPhishing e-mail to custom e-mail addresses
2011-08-16/a>Scott FendleyPhishing Scam Victim Response
2011-07-19/a>Richard PorterSMS Phishing at the SANSFire 2011 Handler Dinner
2011-06-27/a>Kevin ShorttPhishy Spam
2011-06-08/a>Johannes UllrichSpam from compromised Hotmail accounts
2011-06-06/a>Manuel Humberto Santander PelaezPhishing: Same goal, same techniques and people still falling for such scams
2011-02-02/a>Johannes UllrichHaving Phish on Friday
2010-11-29/a>Stephen HalliPhone phishing - What you see, isn't what you get
2010-11-22/a>Lenny ZeltserBrand Impersonations On-Line: Brandjacking and Social Networks
2010-06-21/a>Adrien de BeaupreGoDaddy Scam/Phish/Spam
2010-06-10/a>Deborah HaleAnother Morning of Fun
2010-04-19/a>Daniel WesemannLinked into scams?
2010-02-02/a>Johannes UllrichTwitter Mass Password Reset due to Phishing
2009-12-16/a>Rob VandenBrinkBeware the Attack of the Christmas Greeting Cards !
2009-10-19/a>Daniel WesemannScam Email
2009-10-09/a>Rob VandenBrinkAT&T Cell Phone Phish
2009-09-10/a>Johannes UllrichHealthcare Spam
2009-07-28/a>Adrien de BeaupreTwitter spam/phish
2009-05-24/a>Raul SilesFacebook phising using Belgium (.be) domains
2009-05-04/a>Tom ListonFacebook phishing malware
2009-01-11/a>Deborah HaleThe Frustration of Phishing Attacks
2009-01-04/a>Rick WannerTwitter/Facebook Phishing Attempt
2008-11-11/a>Swa FrantzenPhishing for Google adwords
2008-10-29/a>Deborah HaleEnom Phishing - Caution Enom Registrars
2008-10-10/a>Marcus SachsFake Microsoft Update Email
2008-06-17/a>Kyle HaugsnessWhy go high-tech?
2008-05-26/a>Marcus SachsPredictable Response
2008-05-19/a>Maarten Van HorenbeeckText message and telephone aid scams
2008-04-14/a>John BambenekA Federal Subpoena or Just Some More Spam & Malware?

MALWARE

2015-04-09/a>Brad DuncanAn example of the malicious emails sometimes sent to the ISC handler addresses
2015-03-18/a>Daniel WesemannNew SANS memory forensics poster
2015-03-14/a>Didier StevensMaldoc VBA Sandbox/Virtualization Detection
2015-03-08/a>Brad DuncanWhat Happened to You, Asprox Botnet?
2015-02-19/a>Daniel WesemannMacros? Really?!
2014-10-03/a>Johannes UllrichCSAM: The Power of Virustotal to Turn Harmless Binaries Malicious
2014-09-22/a>Johannes UllrichFake LogMeIn Certificate Update with Bad AV Detection Rate
2014-08-06/a>Chris MohanFree Service to Help CryptoLocker Victims by FireEye and Fox-IT
2014-07-22/a>Daniel WesemannIvan's Order of Magnitude
2014-07-19/a>Russ McReeKeeping the RATs out: the trap is sprung - Part 3
2014-07-18/a>Russ McReeGameover Zeus reported as "returned from the dead"
2014-07-18/a>Russ McReeKeeping the RATs out: **it happens - Part 2
2014-07-16/a>Russ McReeKeeping the RATs out: an exercise in building IOCs - Part 1
2014-07-05/a>Guy BruneauMalware Analysis with pedump
2014-06-22/a>Russ McReeOfficeMalScanner helps identify the source of a compromise
2014-06-08/a>Guy Bruneauefax Spam Containing Malware
2014-04-06/a>Basil Alawi S.Taher"Power Worm" PowerShell based Malware
2014-04-05/a>Jim ClausingThose strange e-mails with URLs in them can lead to Android malware
2014-03-04/a>Daniel WesemannXPired!
2014-02-28/a>Daniel WesemannFiesta!
2014-01-19/a>Rick WannerAnatomy of a Malware distribution campaign
2013-12-24/a>Daniel WesemannMr Jones wants you to appear in court!
2013-12-23/a>Daniel WesemannCostco, BestBuy, Walmart really want to send you a package!
2013-12-07/a>Guy BruneauSuspected Active Rovnix Botnet Controller
2013-11-02/a>Rick WannerProtecting Your Family's Computers
2013-10-31/a>Russ McReeHappy Halloween: The Ghost Really May Be In The Machine
2013-10-30/a>Russ McReeSIR v15: Five good reasons to leave Windows XP behind
2013-10-28/a>Daniel WesemannExploit cocktail (Struts, Java, Windows) going after 3-month old vulnerabilities
2013-10-24/a>Johannes UllrichFalse Positive: php.net Malware Alert
2013-09-30/a>Adrien de BeaupreTwitter DM spam/malware
2013-09-12/a>Daniel Wesemann37.58.73.42 / 95.156.228.69 / 195.210.43.42, anyone?
2013-09-10/a>Swa FrantzenMacs need to patch too!
2013-08-29/a>Russ McReeSuspect Sendori software
2013-07-04/a>Russ McReeCelebrating 4th of July With a Malware PCAP Visualization
2013-06-18/a>Russ McReeVolatility rules...any questions?
2013-05-21/a>Adrien de BeaupreMoore, Oklahoma tornado charitable organization scams, malware, and phishing
2013-05-17/a>Daniel Wesemanne-netprotections.su ?
2013-05-16/a>Daniel WesemannExtracting signatures from Apple .apps
2013-05-11/a>Lenny ZeltserExtracting Digital Signatures from Signed Malware
2013-05-01/a>Daniel WesemannThe cost of cleaning up
2013-04-10/a>Manuel Humberto Santander PelaezMassive Google scam sent by email to Colombian domains
2013-03-22/a>Mark BaggettWipe the drive! Stealthy Malware Persistence - Part 4
2013-03-20/a>Mark BaggettWipe the drive! Stealthy Malware Persistence - Part 3
2013-03-19/a>Johannes UllrichScam of the day: More fake CNN e-mails
2013-03-15/a>Mark BaggettAVG detect legit file as virus
2013-03-14/a>Mark BaggettWipe the drive! Stealthy Malware Persistence - Part 2
2013-03-13/a>Mark BaggettWipe the drive! Stealthy Malware Persistence Mechanism - Part 1
2013-02-25/a>Johannes UllrichMass-Customized Malware Lures: Don't trust your cat!
2013-01-08/a>Jim ClausingCuckoo 0.5 is out and the world didn't end
2012-12-18/a>Rob VandenBrinkAll I Want for Christmas is to Not Get Hacked !
2012-12-03/a>Kevin ListonMobile Malware: Request for Field Reports
2012-11-02/a>Daniel WesemannLamiabiocasa
2012-11-01/a>Daniel WesemannPatched your Java yet?
2012-10-14/a>Pedro BuenoCyber Security Awareness Month - Day 14 - Poor Man's File Analysis System - Part 1
2012-09-21/a>Guy BruneauStoring your Collection of Malware Samples with Malwarehouse
2012-09-14/a>Lenny ZeltserAnalyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
2012-07-21/a>Rick WannerOpenDNS is looking for a few good malware people!
2012-07-05/a>Adrien de BeaupreNew OS X trojan backdoor MaControl variant reported
2012-06-27/a>Swa FrantzenOnline Banking Heists
2012-06-26/a>Daniel WesemannRun, Forest! (Update)
2012-06-25/a>Rick WannerTargeted Malware for Industrial Espionage?
2012-06-25/a>Swa FrantzenBelgian online banking customers hacked.
2012-06-22/a>Daniel WesemannRun, Forest!
2012-06-21/a>Raul SilesPrint Bomb? (Take 2)
2012-06-21/a>Russ McReeAnalysis of drive-by attack sample set
2012-06-19/a>Daniel Wesemann Vulnerabilityqueerprocessbrittleness
2012-06-04/a>Lenny ZeltserDecoding Common XOR Obfuscation in Malicious Code
2012-04-26/a>Richard PorterDefine Irony: A medical device with a Virus?
2012-04-25/a>Daniel WesemannBlacole's obfuscated JavaScript
2012-04-25/a>Daniel WesemannBlacole's shell code
2012-04-12/a>Guy BruneauHP ProCurve 5400 zl Switch, Flash Cards Infected with Malware
2012-04-12/a>Guy BruneauApple Java Updates for Mac OS X
2012-03-25/a>Daniel Wesemannevilcode.class
2012-03-03/a>Jim ClausingNew automated sandbox for Android malware
2012-02-24/a>Guy BruneauFlashback Trojan in the Wild
2012-02-20/a>Pedro BuenoSimple Malware Research Tools
2012-02-20/a>Rick WannerDNSChanger resolver shutdown deadline is March 8th
2012-01-14/a>Daniel WesemannHello, Antony!
2011-12-28/a>Daniel Wesemann.nl.ai ?
2011-12-10/a>Daniel WesemannUnwanted Presents
2011-12-07/a>Lenny ZeltserV8 as an Alternative to SpiderMonkey for JavaScript Deobfuscation
2011-11-04/a>Guy BruneauDuqu Mitigation
2011-10-20/a>Johannes UllrichEvil Printers Sending Mail
2011-09-07/a>Lenny ZeltserAnalyzing Mobile Device Malware - Honeynet Forensic Challenge 9 and Some Tools
2011-08-29/a>Kevin ShorttInternet Worm in the Wild
2011-06-15/a>Pedro BuenoHit by MacDefender, Apple Web Security (name your Mac FakeAV here)...
2011-05-25/a>Daniel WesemannApple advisory on "MacDefender" malware
2011-05-19/a>Daniel WesemannFake AV Bingo
2011-05-14/a>Guy BruneauWebsense Study Claims Canada Next Hotbed for Cybercrime Web Hosting Activity
2011-05-03/a>Johannes UllrichUpdate on Osama Bin Laden themed Malware
2011-05-02/a>Johannes UllrichBin Laden Death Related Malware
2011-04-23/a>Manuel Humberto Santander PelaezImage search can lead to malware download
2011-03-01/a>Daniel WesemannAV software and "sharing samples"
2011-02-07/a>Pedro BuenoThe Good , the Bad and the Unknown Online Scanners
2011-02-01/a>Lenny ZeltserThe Importance of HTTP Headers When Investigating Malicious Sites
2010-12-29/a>Daniel WesemannMalware Domains 2234.in, 0000002.in & co
2010-12-29/a>Daniel WesemannBeware of strange web sites bearing gifts ...
2010-10-26/a>Pedro BuenoCyber Security Awareness Month - Day 26 - Sharing Office Files
2010-09-09/a>Marcus Sachs'Here You Have' Email
2010-07-21/a>Adrien de BeaupreDell PowerEdge R410 replacement motherboard firmware contains malware
2010-07-21/a>Adrien de Beaupreautorun.inf and .lnk Malware (NOT 'Vulnerability in Windows Shell Could Allow Remote Code Execution' 2286198)
2010-07-06/a>Rob VandenBrinkBogus Support Organizations use Live Operators to Install Malware
2010-07-04/a>Manuel Humberto Santander PelaezMalware inside PDF Files
2010-06-17/a>Deborah HaleFYI - Another bogus site
2010-06-14/a>Manuel Humberto Santander PelaezRogue facebook application acting like a worm
2010-06-07/a>Manuel Humberto Santander PelaezSoftware Restriction Policy to keep malware away
2010-06-02/a>Rob VandenBrinkNew Mac malware - OSX/Onionspy
2010-05-26/a>Bojan ZdrnjaMalware modularization and AV detection evasion
2010-05-23/a>Manuel Humberto Santander Pelaeze-mail scam announcing Fidel Castro's funeral ... and nasty malware to your computer.
2010-05-21/a>Rick WannerIBM distributes malware at AusCERT!
2010-04-30/a>Kevin ListonThe Importance of Small Files
2010-04-19/a>Daniel WesemannLinked into scams?
2010-04-18/a>Guy BruneauSome NetSol hosted sites breached
2010-04-13/a>Johannes UllrichMore Legal Threat Malware E-Mail
2010-03-30/a>Pedro BuenoSharing the Tools
2010-03-26/a>Daniel WesemannGetting the EXE out of the RTF again
2010-03-09/a>Marcus SachsEnergizer Malware
2010-03-04/a>Daniel Wesemannsalefale-dot-com is bad
2010-03-03/a>Johannes UllrichReports about large number of fake Amazon order confirmations
2010-02-21/a>Patrick Nolan Looking for "more useful" malware information? Help develop the format.
2010-01-14/a>Bojan ZdrnjaPDF Babushka
2010-01-07/a>Daniel WesemannStatic analysis of malicious PDFs
2010-01-07/a>Daniel WesemannStatic analysis of malicous PDFs (Part #2)
2009-12-17/a>Daniel Wesemannoverlay.xul is back
2009-12-17/a>Daniel WesemannIn caches, danger lurks
2009-12-16/a>Rob VandenBrinkBeware the Attack of the Christmas Greeting Cards !
2009-12-07/a>Rick WannerCheat Sheet: Analyzing Malicious Documents
2009-12-04/a>Daniel WesemannMax Power's Malware Paradise
2009-12-02/a>Rob VandenBrinkSPAM and Malware taking advantage of H1N1 concerns
2009-11-25/a>Jim ClausingUpdates to my GREM Gold scripts and a new script
2009-09-25/a>Lenny ZeltserCategories of Common Malware Traits
2009-09-25/a>Deborah HaleConficker Continues to Impact Networks
2009-09-25/a>Deborah HaleMalware delivered over Google and Yahoo Ad's?
2009-09-04/a>Adrien de BeaupreFake anti-virus
2009-08-29/a>Guy BruneauImmunet Protect - Cloud and Community Malware Protection
2009-08-26/a>Johannes UllrichMalicious CD ROMs mailed to banks
2009-07-26/a>Jim ClausingNew Volatility plugins
2009-07-03/a>Adrien de BeaupreHappy 4th of July!
2009-07-02/a>Bojan ZdrnjaCold Fusion web sites getting compromised
2009-07-02/a>Daniel WesemannGetting the EXE out of the RTF
2009-06-16/a>John BambenekIran Internet Blackout: Using Twitter for Operational Intelligence
2009-06-16/a>John BambenekURL Shortening Service Cligs Hacked
2009-06-04/a>Raul SilesMalware targetting banks ATM's
2009-06-04/a>Raul SilesTargeted e-mail attacks asking to verify wire transfer details
2009-06-01/a>G. N. WhiteYet another "Digital Certificate" malware campaign
2009-05-20/a>Pedro BuenoCyber Warfare and Kylin thoughts
2009-05-07/a>Deborah HaleMalicious Content on the Web
2009-05-04/a>Tom ListonFacebook phishing malware
2009-04-24/a>Pedro BuenoDid you check your conference goodies?
2009-03-13/a>Bojan ZdrnjaWhen web application security, Microsoft and the AV vendors all fail
2009-02-23/a>Daniel WesemannTurf War
2009-02-23/a>Daniel WesemannAnd the Oscar goes to...
2009-02-10/a>Bojan ZdrnjaMore tricks from Conficker and VM detection
2009-02-09/a>Bojan ZdrnjaSome tricks from Conficker's bag
2009-02-04/a>Daniel WesemannTitan Shields up!
2009-01-31/a>John BambenekGoogle Search Engine's Malware Detection Broken
2009-01-24/a>Pedro BuenoIdentifying and Removing the iWork09 Trojan
2009-01-18/a>Daniel Wesemann3322. org
2009-01-15/a>Bojan ZdrnjaConficker's autorun and social engineering
2009-01-12/a>William SaluskyDownadup / Conficker - MS08-067 exploit and Windows domain account lockout
2009-01-07/a>Bojan ZdrnjaAn Israeli patriot program or a trojan
2009-01-02/a>Rick WannerTools on my Christmas list.
2008-12-25/a>Maarten Van HorenbeeckMerry Christmas, and beware of digital hitchhikers!
2008-12-25/a>Maarten Van HorenbeeckChristmas Ecard Malware
2008-12-17/a>donald smithTeam CYMRU's Malware Hash Registry
2008-12-05/a>Daniel WesemannBeen updatin' your Flash player lately?
2008-12-05/a>Daniel WesemannBaby, baby!
2008-12-04/a>Bojan ZdrnjaRogue DHCP servers
2008-11-17/a>Jim ClausingFinding stealth injected DLLs
2008-11-16/a>Maarten Van HorenbeeckDetection of Trojan control channels
2008-11-12/a>John BambenekThoughts on Security Intelligence (McColo Corp alleged spam/malware host knocked offline)
2008-11-11/a>Swa FrantzenAcrobat continued activity in the wild
2008-11-10/a>Stephen HallAdobe Reader Vulnerability - part 2
2008-10-07/a>Kyle HaugsnessGood reading and a malware challenge
2008-09-29/a>Daniel WesemannASPROX mutant
2008-09-22/a>Maarten Van HorenbeeckData exfiltration and the use of anonymity providers
2008-09-18/a>Bojan ZdrnjaMonitoring HTTP User-Agent fields
2008-09-07/a>Lorna HutchesonMalware Analysis: Tools are only so good
2008-09-03/a>Daniel WesemannStatic analysis of Shellcode
2008-09-03/a>Daniel WesemannStatic analysis of Shellcode - Part 2
2008-09-01/a>John BambenekThe Number of Machines Controlled by Botnets Has Jumped 4x in Last 3 Months
2008-08-13/a>Adrien de BeaupreCNN switched to MSNBC
2008-08-05/a>Daniel WesemannThe news update you never asked for
2008-07-20/a>Kevin ListonMalware Intelligence: Making it Actionable
2008-07-15/a>Maarten Van HorenbeeckExtracting scripts and data from suspect PDF files
2008-07-14/a>Daniel WesemannObfuscated JavaScript Redux
2008-07-07/a>Pedro BuenoBad url classification
2008-06-18/a>Marcus SachsOlympics Part II
2008-06-14/a>Lorna HutchesonMalware Detection - Take the Blinders Off
2008-06-10/a>Swa FrantzenRansomware keybreaking
2008-06-01/a>Mark HofmanFree Yahoo email account! Sign me up, Ok well maybe not.
2008-05-28/a>Adrien de BeaupreAnother example of malicious SWF
2008-05-27/a>Adrien de BeaupreMalicious swf files?
2008-05-26/a>Marcus SachsPredictable Response
2008-05-14/a>Bojan ZdrnjaWar of the worlds?
2008-05-02/a>Adrien de BeaupreHi, remember me?...
2008-04-30/a>Bojan Zdrnja(Minor) evolution in Mac DNS changer malware
2008-04-24/a>Maarten Van HorenbeeckTargeted attacks using malicious PDF files
2008-04-16/a>Bojan ZdrnjaThe 10.000 web sites infection mystery solved
2008-04-15/a>Johannes UllrichSRI Malware Threat Center
2008-04-14/a>John BambenekA Federal Subpoena or Just Some More Spam & Malware?
2008-04-07/a>John BambenekGot Kraken?
2008-04-07/a>John BambenekKraken Technical Details: UPDATED x3
2008-04-07/a>John BambenekHP USB Keys Shipped with Malware for your Proliant Server
2008-04-06/a>Daniel WesemannAdvanced obfuscated JavaScript analysis
2008-04-04/a>Daniel Wesemannnmidahena
2008-04-03/a>Bojan ZdrnjaVB detection: is it so difficult?
2008-04-02/a>Adrien de BeaupreWhen is a DMG file not a DMG file
2008-03-27/a>Maarten Van HorenbeeckGuarding the guardians: a story of PGP key ring theft
2006-08-31/a>Swa FrantzenNT botnet submitted
2000-01-02/a>Deborah Hale2010 A Look Back - 2011 A Look Ahead