Phishing Scam Targets Italian Bank

Italian bank Banca Popolare di Sondrio has become phishers’ new target with the discovery of a spammed message containing a link to the supposed bank’s Internet banking site, SCRIGNO.

As with previous bank-related phishing attempts, clicking the link leads users to a site that looks very much like the legitimate Internet service’s login page. [...]

Mebroot Variant Behaves Like TDSS

The TDSS malware family in itself is already a big threat to users. Known for its rootkit capabilities, TDSS constantly evolves to include more sophisticated means in order to hide its presence in an affected system. The Mebroot malware family, on the other hand, is noted for inflicting master boot record (MBR) infections. TrendLabsSM [...]

Hotmail’s new security features vs Gmail’s old security features

Microsoft’s revamped Hotmail, set to be rolled out in mid-summer according to the company’s press release, introduces several new features. Let’s review them, their applicability to today’s cyber threatscape, and compare them to Gmail’s currently available security features.

Read entire article

[...]

Malware Watch: Rogue Facebook apps, fake Amazon orders, and bogus Adobe updates

This week’s Malware Watch features four campaigns, spamvertised fake Amazon orders, followed by ZeuS crimeware serving email campaign using "Adobe Security Update" as a theme, Adult content themed "Watch Video" campaign, and the "sexiest video ever" rogue Facebook application.

Read entire article

[...]

New AutoRun Worms Utilize Action Key

Autorun.inf is prevalently used by worms as an autostart technique. Through this file, the worm is able to automatically execute whenever an infected drive is accessed. Over time, users have been able to think of workarounds to manually remove the malware file while preventing it from executing. Some of these are:

Using command prompt to [...]