Zero-Day Exploit Used for DUQU

We have been closely monitoring developments on the DUQU malware since our initial blog post when the threat broke the news. And just recently, the Hungary-based security laboratory that initially reported about DUQU released more information that sheds more light into the nature of the said threat. Their report indicates that a Microsoft Word [...]

Technical Analysis for Mozilla Firefox Array.reduceRight() Vulnerability

The usage of exploits in current threats underlines the critical need for users to keep programs updated at all times. Considering the great amount of time people spend on their computers connected to the Internet, web browsers are prime targets for cybercriminals. This is a technical analysis of a recently discovered vulnerability in one [...]

A Refresher on Spam and Exploits

Lately, we have been seeing a renewed increase in volume of spam attacks that utilizes an exploit kit – specifically, the BlackHole exploit kit – to trigger a malicious payload. Specifically, we have seen this in the latest slew of Automated Clearing House (ACH) spam, and the more recent spam run related to Steve [...]

‘Steve Jobs Alive!’ emails lead to exploits and malware

Security researchers from M86 Labs have intercepted a currently spreading malware campaign using Steve Jobs as a social engineering theme.

A Special Offer From Our Sponsor Cisco and the Future of the Workplace Mobility    Mobile workers will make up 35% of the global workforce in 2013, creating an “anywhere office”. Will your [...]

Facebook Malvertisement Leads to Exploits

There are already many known ways that cybercriminals use in targeting Facebook users. In the infographic that we recently released, The Geography of Social Media Threats, we illustrated the different social networking features abused by cybercriminals, and the threats that they usually lead to. In the course of our research, we found one specific attack [...]