Flash and Acrobat/Reader Hit by New Zero-Day Exploit

This week is turning out to be a busy one for zero-day exploits. Days after such a bug was found in Firefox, it’s Adobe’s turn to have its products under the gun. According to the official Adobe security advisory, both the Flash and Acrobat/Reader product lines have been confirmed vulnerable to this latest problem. [...]

Norton Mobile Security (Beta)

One of the first places people often turn to when searching for antivirus protection for their new computer is Symantec’s Norton suite of security tools. The company is now looking to extend that protection beyond the PC to your mobile phone through its Norton Mobile Security app. This app, although currently in beta, adds [...]

Full Analysis of the ZeuS-LICAT Trojan

Following last September’s turn of events, where several individuals were arrested for using information stealing Trojans known as the ZeuS toolkit, a much anticipated “upgrade” was inevitable so that it could continue its money-making ploy. Soon enough, we received cases about a ZeuS Trojan (TSPY_ZBOT.BYZ) with the following new features: Trojanizing executable files to [...]

Why Cybercriminals “Outsource” Malware Distribution

Recently, during the analysis of one particular malware sample, we came across the author’s online nickname. Following some digging, we found a link to the location where the author was advertising his malware and allowing others to freely download its source code: The blurbs in the said site promote some of the malware’s features: the fact [...]

Firefox Zero-Day Found in Compromised Nobel Peace Prize Website

A major web site being compromised and serving up malware is bad news in itself. However, when that attack is using a previously undiscovered and unpatched zero-day vulnerability, the problem becomes even greater. The official website of the Nobel Peace Prize was compromised and used to serve an exploit targeting a zero-day vulnerability in Mozilla [...]