Daily Archives: 2.5.2013

Comment on Game of Coins: The Uprise of Bitcoin Mining by GoodNPlenty333

I’ve wondered the same thing.. ISP’s should just shut off internet access to these compromised computers to entice their owners to get their act together. more…

Network gaming company uses its "cheat-prevention" client to build a Bitcoin botnet

One problem with network games: how do you trust the other people in the contest? You could build a network that requires your customers to installed a special “cheat-blocker” client… …and then use the client to mine Bitcoins. more…

Comment on Web Server Attacks – Apache Modules, Log Management and RELM by Apache Web Server Attacks Continue to Evolve | Sucuri Blog

[…] is utilizing. We’ve provided guidance in the past on how to identify these things both on CentOS / RedHat and Debian distro’s. That guidance is still the same, but I do want to add some more […] more…

Comment on LinkedIn Password Dump Verified by LivingSocial Hacked — More Than 50 Million Accounts Compromised | Sucuri Blog

[…] put this into perspective, if you think back to last years major compromise, LinkedIn, that was only 6 million accounts. The data compromised here is about 8.5 times that […] more…

Comment on Server Compromises – Understanding Apache Module iFrame Injections and Secure Shell Backdoor by Apache Binary Backdoors on Cpanel-based servers | Sucuri Blog

[…] modules (Darkleech) to inject malware into websites. Some of our previous coverage is available here and […] more…

Comment on WordPress Plugin Social Media Widget Hiding Spam – Remove it now by Brute Force Attacks and Their Consequences | Sucuri Blog

[…] Many could argue though that the real objective is for large scale search engine poisoning (SEP) attacks. This is perhaps one of the more lucrative attacks, in terms of financial gain, with the least amount of overhead and risk. Most of the other scenarios will include the integration of more complex attack sequences which […] more…

Comment on Is WordPress.com SPAM Campaign Due to Compromise? by Protecting Against WordPress Brute-Force Attacks | Sucuri Blog

[…] of such a prominent issue, the first large-scale issue of such attacks first presented itself in October of 2012 when WordPress.com disclosed that some 50,000 sites were compromised using a similar […] more…

Comment on WordPress Plugin Social Media Widget Hiding Spam – Remove it now by When Good Plugins Go Bad – SEO Spam on Joomla Websites | Sucuri Blog

[…] recently published an article about an interesting case where a very popular WordPress Plugin (Social Media Widget), with more […] more…

Comment on Website Malware – Sharp Increase in SPAM Attacks – WordPress & Joomla by 2012 Web Malware Trends Report Summary | Sucuri Blog

[…] http://blog.sucuri.net/2012/12/website-malware-sharp-increase-in-spam-attacks-wordpress-joomla.html […] more…

Comment on Careful With Fake jQuery Website – jquery-framework. com by 2012 Web Malware Trends Report Summary | Sucuri Blog

[…] http://blog.sucuri.net/2012/09/careful-with-fake-jquery-website-jquery-framework-com.html […] more…

Hedge fund manager sentenced in Dell insider trading case

A former portfolio manager at the now defunct Diamondback Capital Management has been sentenced to 54 months in prison for crimes related to a multimillion dollar insider trading scheme involving computer maker Dell and hardware maker Nvidia. read more more…

Game of Coins: The Uprise of Bitcoin Mining

Research by Daniel Cid. Authored by Dre Armeda. One thing you can’t take away from some of the attackers we deal with everyday is their creativity. From time to time we write about new trends we’re seeing, and this post is no different. We’re seeing a new tactic recently, and it may be affecting your […] more…

The SCADA security survival guide

There's a gap between SCADA system security technologies and the understanding of risk among those in operations. Here's a collection of some of our best stories on the threats, and what needs to be done to mitigate them. read more more…

Backdoor Leads to Facebook and Multi-protocol Instant Messaging Worm

DORKBOT, which became notorious for spreading via social media and instant messaging applications (e.g.Skype and mIRC etc.), is now found propagating in multi-protocol instant messaging (IM) apps like Quiet Internet Pager and Digsby. These apps enable users to communicate via various IM apps. Digsby supports AIM, MSN, Yahoo, ICQ, Google Talk, Jabber, and Facebook Chat […] more…

US Department of Labor website hacked, serves malware, now fixed

A subdomain of the US Department of Labor’s main website, running off a separate server – what’s known colloquially as a microsite – was modified to serve up malware. Paul Ducklin takes a quick look at the attack… more…

Reputation.com resets all user passwords following breach

Fortunately, the few passwords that were nabbed were salted and hashed. Also, the company doesn’t request sensitive information such as Social Security Numbers and doesn’t store financial data such as credit card numbers or bank accounts. Kudos for good security practices, guys. more…

« Older posts