Ooops… hard drive maker ships trojan on storage media

Friday, November 25th, 2005

Oooops… According to the Sunbelt blog a Japanese storage maker (I-O Data Device) has offered to exchange drives that were discovered to have been shipped out with the Tompai-A, a worm which would give a cracker backdoor access to a machine. It affects portable hard drive’s in the companies HDP-U series.    Send article as […]

Cleaning up after the Sony Rootkit

Monday, November 21st, 2005

Sunbeltblog has a suggestion (from Ben Edelman) for SONY on how to get the word out to customers that they have the problem laden XCP/ rootkit/ trojan/ drm software that’s been burning up tech news… Distribute an ad through their own rootkit. It does, after all, “phone home” from time to time and…. it looks […]

MS05-053 Microsoft Windows Image Viewing Vulnerability

Thursday, November 10th, 2005

Two notes on the Windows vulnerability patched day before yesterday. There is a trojan in the wild exploiting it and Symantec’s AV definition to detect such an exploit is a bit too paranoid and flags lot’s of emf files as having an exploit for the same. The workaround is to disable emf files from virus […]

Macromedia flash player vulnerability

Monday, November 7th, 2005

A severe security vulnerability has been found in versions of the Flash Player prior to 7.0.19.0 Many sites require flash player in order to view various features on the site (depending on the site this ranges from commercials to the site navigation.) A specially crafted swf file on a remote website could allow the attacker […]

Another Massive ID theft ring

Saturday, August 20th, 2005

It looks like Sunbelt has found ANOTHER massive Identity theft ring. They suspect it’s a trojan from the Dumaru family that is contentedly logging the infromation and promise more details.    Send article as PDF   

Another entry in the sunbelt discovery of a keylogger

Monday, August 15th, 2005

Sunbeltblog has another entry in the continuing story. Really, there is not much new here, but iDefense has analyzed the code of the trojan that was discovered and have stated that it is not related to CoolWebSearch. (Which is what sunbeltblog has been saying for some time.) They initially said it was discovered during a […]

Mail Viruses Junk Spam Phishing and now Dark?

Friday, August 5th, 2005

Okay, I’ve seen a new term come across the horizon in the battle of the email inbox. First there were viruses, then junk mail, which became known as Spam and then Phishing attacks now we’re up to DarkMail. According to scmagazine , an IT security focused publication, the earmarks of darkmail are similar to junkmail […]

More on the virus/trojan front

Friday, June 4th, 2004

I have a couple new things to post. One, in my futher investigation of the server logs, from the last big topic…. (read the entries below.) I’ve discovered at least one MAC, so this should be a warning that no one should take system security for granted. Likely someone has installed a rootkit of some […]

Google
 
Web www.averyjparker.com