Facebook Events, Credits, and Passwords Being Used for Attacks

Facebook has expanded their number of offered services for its numerous users, making the site so much more than a place for users to interact. It has been said in several instances that Facebook is bound to replace email as a means of communication, as it provides a more convenient way for users to [...]

Emergency Adobe Flash Player patch coming today

Less than a week after warning that hackers were embedding malicious Flash Player files (.swf) into Microsoft Word documents to launch targeted malware attacks, Adobe plans to release an emergency Flash Player patch today to fix the underlying problem.The patch will fix a “critical” vulnerability in Flash Player 10.2.153.1 and earlier versions for Windows, [...]

Stalking TDL4: All Access Pass to the Hard Drive

Recently my colleagues and I have been analyzing TDL4 — a variant of the well known malware family TDSS. TDSS, as we know, is and advanced malware that evades detection by going back to where we stopped looking long ago: in the boot sector. Back in the 16-bit DOS days, boot viruses spread from [...]

A Win For The Good Guys: The Coreflood Takedown

It’s botnet takedown season again and this time around it was CoreFlood that bit the dust. As is most often the case nowadays, this botnet was built exclusively to steal personal and financial information from the victims. The takedown was facilitated by the US Department of Justice and the Federal Bureau of Investigation. This is [...]

Highly Targeted Attacks and the Weakest Links

Here at Trend Micro, we have seen all kinds of cybercrime and digital threats. For the first-ever Cybersecurity Awareness Day in Singapore, one of my colleagues, Richard Sheng, has taken time out to explain what so-called “Advanced Persistent Threats” (a.k.a. APT) are. Singapore is one of the first Asian countries to come up with a [...]