-
- ChetWisniewski: Microsoft wasn't the only one to release patches on Valentine's. Adobe Shockwave and Oracle Java get critical fixes http://t.co/S26DjIl7about 2 hours ago
- SophosLabs: Warning - Whitney Houston autopsy video links on Facebook aren’t what they seem http://t.co/aLG1e7vY tip @techmemeabout 8 hours ago
- SophosLabs: Who has better privacy laws: USA or European Union? http://t.co/rQUnw2kW (via @mooseabyte)about 9 hours ago
- gcluley: Warning: Whitney Houston autopsy video links on Facebook aren’t what they seem http://t.co/sg98h50Fabout 9 hours ago
- SophosLabs: iPhone 5 tester SMS text scam hits cellphones http://t.co/0orOOGG7about 12 hours ago
Monthly Archives: December 2009
Can anyone be a malware researcher?
While enjoying my holiday and catching up on my reading this morning, I discovered a post that raises some concerns I would like to share with you. I use the social networking service LinkedIn to keep in touch with colleagues Read more…
The five most popular Clu-blog posts of 2009
(You may want to read the first half of this countdown first) The tension is building, the champagne is nicely chilled, and I've crowbarred myself into a tuxedo, because it's almost time to reveal the most popular postings I made Read more…
Cross words take weak GSM crypto into 2010
The Summer Holiday Crossword Competition is open until the end of 2009 in any regular timezone, so you have until 2009-12-31T23:59:59-12:00 to enter. (That's 11pm on NYD in Sydney.) The guaranteed prizes for the first three correct entries were snapped Read more…
The top ten Clu-blogs of 2009
2010 is looming large, which can only mean one thing - it's time to break my holiday sabbatical and compile my annual list of the most popular Clu-blog posts of the year. Yep, fill your glasses, put another log on Read more…
What do you see?
Here in the labs, we recently had an interesting message arrive in our systems; after viewing the message, 100% of those polled agreed on what it was. What do you think? If you answered spam, you're on your way to Read more…
Twitter banned passwords
As you may have heard in the last few days, Twitter has banned 370 passwords (actually only 369, 'password' appears twice in the list) as 'too obvious' to be safe for their users. A good move in theory but why Read more…
Not-so funny jokes
Firstly, Merry Christmas to all our readers! Unfortunately, Christmas doesn't mean that the malicious activities in cyberspace is going to stop, hence this posting. Today we received a message that claims to have come from one of the Google Groups. The message Read more…
Are you caring for your Mom and Dad at Xmas?
For those of you that are having to put up with looking after your parents over Christmas: Would you much rather selfishly indulge yourselves with partying? A kindly spammer has a very seasonal Christmas Eve message offering to make this Read more…
More on Troj/JSRedir-AK
Since first releasing detection (2 days ago) for Troj/JSRedir-AK SophosLabs have seen thousands of websites affected by it. Since blogging yesterday we have seen a few minor variants and have had to update the our detection. One of the updates Read more…
GNU GPL malware?: Troj/JSRedir-AK
Yesterday, one of our technology partners Yandex notified us of some new malware. They use Sophos to scan webpages for malicious content while they scan the Internet and often report new threats. The malware in question, Troj/JSRedir-AK, is appended to Read more…
Geeky Christmas fun?
Are you working over Christmas and New Year, like Sophos Support and SophosLabs? If so, here's a bit of fun – official, educational fun! – to tide you over those hours in the office when everyone else is taking your Read more…
Christmas Bo(g)us
Well, it didn't take long for the Christmas E-Card scams to start. Recently we have seen email messages pretending to be from Hallmark, suggesting that you have received an E-card from a friend. The complete email message looks like this: You Read more…
CNNIC changes have effect on spam tactics
As was announced on Dec 11th, CNNIC (China Internet Network Information Center) now requires a "formal paper based application material when making the online application to the registrar." The motivation behind this seems more related to cracking down on porn Read more…
Twitter website struck by 'Iranian Cyber Army' hackers
A hacking group calling itself the "Iranian Cyber Army" pulled off a coup for about an hour earlier today, redirecting visitors to the Twitter website to a page containing a green flag and Arabic writing: Fortunately there is no indication Read more…
An essay on Australian internet filtering
The dust is starting to settle after the Australian government's announcement three days ago that it will legislate in 2010 to compel Australian ISPs to censor local internet access. The cabinet minister in charge of the project, Stephen Conroy, infamously Read more…
A shady domain
When investigating a domain hosting malware one of the first things we normally do is look at the domain's 'whois' information. The first thing I look at is the creation date since you can usually distinguish an infected site from Read more…
Who's the quickest? Only one way to find out...
Earlier on this morning I happened to notice a redirect page used in a meds spam campaign that just happened to also be compromised with a malicious script. You can see the META tag redirect that will instruct the browser Read more…
Spam for the visually impaired
Starting at ~3:20pm GMT today, Canadian Pharmacy spammers began using attached MP3 files as the call-to-action for their latest campaign. The message had no subject, no "text" body content, just an attached "audio/mpeg" file with a random lower case file Read more…
New Adobe 0-day
Yesterday, murmurings of a new Adobe exploit surfaced [see for example here]. Adobe have also posted some brief information about this vulnerability (CVE-2009-4324) here. At this point it is not clear exactly how widespread attacks targeting this vulnerability actually are. Read more…
Putting my feet up...
There is a rule at Sophos about taking holidays. Alongside the normal rules like "You can only carry five vacation days over into the next year" and "Don't spend your holiday working for McAfee" there is also a rule which Read more…
