Articles by Paul Baccas
Malware researcher Paul Baccas reveals how an Excel spreadsheet using the password "VelvetSweatshop" could be designed to put your computer at risk.
SophosLabs has been tracking an infection of Mal/Iframe-AL on Seagate's blog since late February.
Are you taking enough care of your company's websites?
A targeted Mac malware attack strikes a minority group in China, exploiting an old Microsoft Word vulnerability.
Learn more about what our experts have seen, and ensure that you have protection in place.
Earlier this year, no starch press, sent SophosLabs an unrequested copy of the book Practical Malware Analysis: The hands-On Guide to Dissecting Malicious Software with a letter saying "If you do enjoy the book, I hope that you will consider Read more…
Do you think that Windows help file is safe? Think again.
Malware authors can create boobytrapped .HLP files, designed to infect your computer.
Cybercriminals take advantage of the critical zero-day flaw vulnerability in Java, sending out malicious emails which pretend to come from an accountancy firm announcing a rise in the tax rate.
Reports of a recent targeted malware attack, known as Shamoon or Troj/Mdrop-ELD, have popped up this week.
Here is some detailed analysis of the malicious Trojan.
Firms and organisations are recommended to check that they are keeping up-to-date with their security patches, in the light of a malware attack that was seen today - targeting a defence contractor.
Ladonna, Lekisha, Solange, Maggie, Lorri, Clorinda, Estefana, the list goes on..
I'd like to thank all of you for your kind (unsolicited) offers to start a relationship.
The jobs website of a major international hotel chain is silently serving up malware to visitors.
And curiously, the security breach appears to be connected to other recent high profile attacks. Paul Baccas of SophosLabs looks deeper.
Although security software can protect against this vulnerability, let's hope that Microsoft can release a proper patch against it - it's being actively exploited in the wild.
SophosLabs researcher Paul Baccas takes a close look at a way in which malware authors attempt to disguise their attacks inside boobytrapped PDF files.
Senior Threat Researcher Paul Baccas reviews the book "Hacking Ninja: Unconventional penetration testing tactics and techniques".
Technology is helping anti-virus researchers detect malicious Microsoft Office files, by examining if they fail to conform to the OLE2 file format specification.
This week there is an opportunity to meet members of the SophosLabs and Naked Security teams at the prestigious Virus Bulletin conference.
Malicious code has managed to inject itself into the PHP code used on some websites running WordPress, meaning that if you visit them when running Internet Explorer you could be exposing yourself to a malware attack.
Is your WordPress installation properly secured?