Malware-infected WinRAR distributed through Google AdWords

Scammers are at it again – taking advantage of Google sponsored ads for acquiring traffic in order to redirect it to malware-infected copies of legitimate software. win.rar GmbH is warning users of an ongoing fraudulent AdWords campaign pushing a malware-infected copy of WinRAR, the popular archiving application. Starting from the basic fact that, both, [...]

It’s a good day to disclose the largest credit card data breach ever

While the majority of American media is glued to the quadrennial spectacle that is the Presidential inauguration, Heartland Payment Systems has uncovered a piece of malware hidden in their payment processing system. This has apparently lead to what may be the largest data breach ever.

Hearland Payment Systems, a credit card payment processor, apparently [...]

Heartland finds malware in bank card payment system

Heartland Payment Systems, a publicly traded company that provides bank card payment processing services to merchants in the U.S., has suffered a malware breach that may be linked to a “widespread global cyber fraud operation.” In a statement (see Adam O’Donnell’s coverage), the company said its system used to process Visa, MasterCard, American Express [...]

The Mess that is WORM_DOWNAD

The massive number of WORM_DOWNAD.AD infections would make it one of the more memorable outbreak worms, and clearly a destructive one, in an age when malware are mostly geared for profit. Poor patch management, weak passwords, and the propagation routines of the worm itself are main factors in its continuing upsurge.

Figure 1. WORM_DOWNAD.AD infections [...]

My bad! ZDNet actually was sending out spam!

I must apologize to the bloggers over at Commtouch. It turns out a website hosted at ZDNet, partially retired in 2004, was the culprit.

What did I learn from this, you may ask? Two things.

I have to communicate more effectively with my IT staff, otherwise I will again claim we are doing something [...]