- ChetWisniewski: Fancy some geeky tech-puzzle fun? Try our latest #sophospuzzle (and win a NERF gun) http://t.co/9k3pr1Qaabout 3 hours ago
- ChetWisniewski: Looks like no #Canadians have solved the latest #sophospuzzle yet - c'mon, let's give'r http://t.co/9k3pr1Qaabout 4 hours ago
- SophosLabs: Sophos just released a beta of its free Android anti-virus scanner (does other things too). Get it here http://t.co/9ankUHxhabout 4 hours ago
- gcluley: Technical paper - Fake anti-virus: The journey from Trojan to a persistent threat http://t.co/8pyjNEbGabout 5 hours ago
Monthly Archives: June 2008
Proactive Detection - The devil's in the detail
Last week saw the publication of the latest report from AV-Comparatives.org on proactive detection rates. The process followed is to take a product that is effectively out of date (i.e. no updates applied) and scan new malware samples to see Read more…
Amazon, DoS, Short-n-Distort...
Yesterday, I blogged about a new spam campaign that was referring to recent troubles with Amazon.com website. The assumption was that the scammers are spreading the word in order to convince enough people sell their AMZN stock and lower its Read more…
Short-and-distort stock spam?
The so-called "pump-n-dump" stock scam dominated the spam arena in 2007. It fueled the increase in "image" spam and was contributing to over 30% of total spam volume sent. In 2008, the stock spam was barely noticeable. The decline could Read more…
Wrong kind of 'accident and emergency'
We have blogged about the recent SQL injection attacks a few times recently [1,2]. Though we have not mentioned it in the last few weeks, the problem has certainly not gone away. We are still seeing large numbers of sites Read more…
To my Italian friend, refill your phone card for free!
Every once in a while, we come across some highly targeted campaigns, especially against specific languages. Today, we encountered an Italian spam campaign with the malware Troj/Fagianom-A attached in a zip file. Often, non-English language campaigns are not seen by Read more…
Pushdo keeps on pushing...
On Tuesday we saw a large blast of emails containing attachments which were detected as Pushdo. Their strategy this time was to take advantage of many womens' weakness and offer a 50% discount card for shopping. Unfortunately, the place they Read more…
Facebook spammers and malware creators, working together
In the realm of Web 2.0 we see a prevalance of information sharing, especially in social-networking sites such as MySpace and Facebook. While there is nothing wrong with information sharing, there have been many concerns about privacy, productivity at work Read more…
Want to invest in Manchester United?
We got something a little unusual in our spam queues this afternoon. It's not often we see phishing emails supposedly from Sir Alex Ferguson himself. Dear Manchester United Fan, We are please to inform you that, you have been given Read more…
Light blogging for a few weeks
Apologies to regular readers but it's going to be all quiet on the blog front for a couple of weeks, as I have to nip into hospital for an operation and then take it easy for a short while. So, Read more…
Self cleaning malware back in vogue?
Back in the 1980s and early 1990s self-disinfection was a technique used exclusively by parasitic viruses to avoid detection, however it seems the modern malware writers have rediscovered it. The sample arrives as a specially crafted Word document about the Read more…
More than just the browser
One of the questions I frequently get asked by customers is "Which browser do you recommend?". My answer has been the same for a while now - it depends entirely upon the user and their environment. Of course, for home Read more…
Another Google Earth video - this time starring Britney Spears
We had a great response to the blog entry we posted yesterday, describing how we have used Google Earth to track malware and spam campaigns around the world. Some of you have asked for a better look at the malware Read more…
SophosLabs maps malware and spam with Google Earth
Every day SophosLabs receives millions and millions of pieces of data from around the globe about the latest malware and spam campaigns. Our worldwide network of spamtraps and honeypots as well as other sources provide us with second-by-second reports of Read more…
A cyber-thriller for our German readers: "Spam from the 8th floor"
Those awfully clever chaps in Sophos's German offices have been busy. Not content with their day job of helping big businesses prevent hackers, malware, spyware and spam causing disruption they have also turned their hand to something new: writing an IT crime Read more…
Untangling the multi-component threat
For the most part malware is built with a particular purpose in mind, be it harvesting passwords, acting as a backdoor, stealthing files or simply replication accross networks, but some recent samples are breaking this convention and utilizing a number Read more…

