Malware
Has your Hewlett-Packard ScanJet printer just tried to infect your PC with malware?
Beware! Cybercriminals have attempted to infect computers worldwide, disguising their attack as an email claiming to come from a scanner in your office.
The biggest Mac malware attack of all time - blogger names suspected mastermind
Award-winning security blogger Brian Krebs has shared details of his investigation into who might have been behind Flashback - which hit more than 600,000 Mac computers in early 2012
"We apologise for the previous apology" - NZ gov dept in email CC: double-blunder
A government department in New Zealand has had to apologise twice after mixing up CC: and BCC: when apologising for mixing up CC: and BCC:.
It's a really easy mistake to make, so take a moment to remind yourself why it's a bad idea...
DarkSeoul: SophosLabs identifies malware used in South Korean internet attack
Computer networks belonging to South Korean TV broadcasters and at least two major banks have been disrupted by what some have suggested was a malicious internet attack originating in North Korea.
A DHL delivery which is nothing but malware - Windows users warned of email attack
Have you received an email from DHL about a failed package delivery?
Please remember to be on your guard. Cybercriminals are once again up to their old tricks.
Chameleons, botnets and click fraud
A botnet called "Chameleon" is said to be generating more than $6 million a month through bogus clicks on online adverts.
Find out more about how click fraud works.
Pope sued over sexual abuse and not wearing seatbelt? Fake CNN and BBC news alerts spread malware
Malware campaigns spammed out in the last 24 hours have pretended to be breaking news stories from the likes of CNN and the BBC.
Express Shipment Notification emails contain malware
Online criminals have spammed out messages, claiming to come from DHL Express International, that are designed to install malware onto the computers of unsuspecting PC users.
Monday review - the hot 32 stories of the week
It's that time of the week again - here's your roundup of everything we wrote in the last seven days.
NIST, US government's vulnerability database, brought down by ironic malware
The US's national vulnerability database has been offline for days thanks to multi-server infection inflicted by hacker(s) who really know how to hurt a infosec guy or gal.
Seagate's blog pushes malware on unsuspecting visitors via rogue Apache modules
SophosLabs has been tracking an infection of Mal/Iframe-AL on Seagate's blog since late February.
Are you taking enough care of your company's websites?
Oh dear. SophosLabs has upset some malware authors
Sometimes an insult can be amusing.. and even strangely complimentary.
Here's something which raised a smile for researchers at SophosLabs.
Malware poses as booking confirmation email from Welsh seaside hotel
Heads up folks!
A seaside hotel in Pembrokeshire, South West Wales, has become the unwilling participant in a widespread malware attack spammed around the world. Don't be fooled into infecting your PC.
Germans bombarded in malware attack, shipment firm caught in crossfire forced to suspend email address
A hard-hitting malware attack is hitting German email inboxes, and causing a headache for an innocent shipment firm mentioned in the messages.
Malware attack poses as security warning from Microsoft Digital Crimes Unit
A cybercriminal attack uses the fear of vulnerabilities and malware infection to trick users into unwittingly compromising their Windows computers.
Saudi Aramco, Saudi Arabia's national oil company, has had its Twitter hacked
Saudi Aramco, the national oil company of Saudi Arabia, has had its official Twitter account compromised by hackers.
The hackers have changed the firm's avatar and are tweeting out a series of messages.
Rogue Apache modules pushing iFrame injections which drive traffic to Blackhole exploit kit
SophosLabs has seen huge volumes of legitimate sites being compromised with malicious redirects in recent weeks.
Fraser Howard explains what's going on, and how the compromised web servers are almost exclusively running Apache.











