- duckblog: Get into RSA 2012 in San Francisco for free! Use the code SC12SPH - http://t.co/DXO28TCYabout 2 hours ago
- ChetWisniewski: Update on the KPN compromise in The Netherlands, company says "password are encrypted with UTF8" http://t.co/EmDuXfqSabout 2 hours ago
- gcluley: Cryptome was hacked this weekend directing users to Blackhole exploits. Advice for web admins http://t.co/aN78hlkpabout 5 hours ago
- ChetWisniewski: Leaks website Cryptome was hacked this weekend directing users to Blackhole exploits. Advice for web admins http://t.co/OxSK9sifabout 5 hours ago
Monthly Archives: November 2009
Man arrested for robbing RuneScape virtual characters
It has been revealed that British police have arrested a 23-year-old man accused of stealing virtual characters and goods from players of one of the world's most popular online games. The man, from the Avon & Somerset region, was arrested Read more…
Hackers exploit Tiger Woods car accident to spread malware
Cybercriminals have wasted no time taking advantage of the news that the world's number one golfer, Tiger Woods, has been involved in a car accident outside his house in Florida. Hackers have created webpages claiming to contain video content related Read more…
FakeAV -- a lesson in aggression
Those "Antivirus System PRO" folks are up to their nasty sales tactics again. While its use of a pushy (and confusing!) yes-no no-yes dialog sequence is similar to other fake AV variants, a signature feature involves periodically opening a browser Read more…
ICO warns of tougher penalties for future data leaks
The Information Commissioner's Office (ICO) is arguing in the British media that company board members need to wake up to the issues of securing personal information or risk substantial fines. The warning comes as it was revealed that a laptop Read more…
Spammer believes WOW users are sad lonely men
Spammers use social engineering and in this case expect that WOW (World of Warcraft) gamers are sad lonely men. At least that is what this spam suggests: The spam will come with a subject of "Do you like to find Read more…
Not just plain old http
Yesterday, I heard a radio interview about on-line security. Unsurprisingly, the discussion got around to encryption, SSL and https. Inevitably, the interviewer asked, "What should we look for to make sure that a secure web page really is using https Read more…
Bad news for NASA hacker Gary McKinnon - extradition seems imminent
According to media reports, British Home Secretary Alan Johnson has rejected a last-bid attempt by Gary McKinnon's supporters to prevent his extradition to the United States. Concerns have been raised that 43-year-old McKinnon, who was arrested almost eight years ago Read more…
Ubisoft confirms Splinter Cell website 'hack'
Tom Clancy's Splinter Cell is a phenomenally popular series of video games where players stealthily creep up behind the bad guys and silently ermm.. "despatch them". The trick to succeed is stay in the shadows, sneak up on the enemy Read more…
DHL Tracking Number UOYKCUFSBERKNAIBR spells danger
The cyberscoundrels are up to their dirty rotten tricks again, sending fake emails pretending to be notifications from DHL that there is a parcel that you should pick up. Attached to the emails is a ZIP file called UOYKCUFSBERKNAIBR.zip which Read more…
Early ecard Christmas malware cheers
There are two major methods malware writers use to infect and take control over remote systems. The first one relies on exploiting unpatched vulnerabilities in software such as a web browser or configuration vulnerabilities such a weak passwords. The second Read more…
HO HO HO Santa has a virus for you
This morning while triaging customer malware and spam samples I saw a variation on the typical click-the-link and get malware spam. This one was Christmas themed, normally we would expect Thanksgiving themed spam before the Christmas glut. The spam has Read more…
Crumbs! A great night at the Computer Weekly Blog awards
I've had a good night's sleep, but I'm still feeling rather incredulous about what happened at last night's Computer Weekly awards in London. Winner: IT Security blog of the year - Graham Cluley's blog, Sophos Winner: Twitter user of the Read more…
Ikee worm author gets job at iPhone app firm
The author of the world's first iPhone worm must be feeling pretty chirpy today, because he's managed to get himself a job as an iPhone application developer. 21-year-old Australian Ashley Towns, revealed that he was going to join mogeneration (What Read more…
New IE exploit - a good opportunity to upgrade to IE 8?
Over the weekend the details of a new Internet Explorer vulnerability were posted online (as reported here and here). By crafting a malicious web page attackers are able to exploit the vulnerability and trigger remote code execution, making it possible Read more…
Who's next for a smartphone virus?
Since the late 1990s some doom-mongers in the computer security industry have been predicting a tidal wave of mobile phone viruses, impacting every hoody-wearing happy-slappy ringtone-downloading ASBO-carrying teenager in the land. The reality has been rather different. Although some cellphone Read more…
A bad day for browsers, severe flaws... again
Microsoft just posted an advisory on the recently discovered zero day flaw in Internet Explorer 6 and 7. It would appear that the workarounds are to use IE8, enable "Protected Mode" in IE7 on Vista, ensure Data Execution Prevention (DEP) Read more…
NFL player David Clowney is Twitter-hacked
David Clowney is not unusual in being a 24-year-old who is hooked on Twitter. No, what makes David Clowney stand out from the crowd is that he's a talented American football player, who appears for the New York Jets. And Read more…
Godfather of spam jailed for four years
Alan Ralsky, the so-called "Godfather of spam", has been sentenced to four years in jail for his role in a stock fraud scheme that earned him $2.7 million during the summer of 2005. 64-year-old Ralsky, of West Bloomfield, Michigan, was Read more…
How to clean up the Duh iPhone worm
I'm quite pleased about having been able to reveal the 'ohshit' password for iPhones infected with the Duh virus. I've already had emails from happy Dutch readers who have used it to get back control of their infected devices. This Read more…
Flash, Large Hadron Collider and Malware
You must be wondering what these three have in common. They all appeared together in a special spam message today, in the latest incarnation of malware masquerading itself as a flash player plug-in. This message appears very dodgy from the start: Wow, Read more…


