<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Spyware Security &#187; Malware</title>
	<atom:link href="http://www.spywaresecurity.net/tag/malware/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.spywaresecurity.net</link>
	<description>Anti Spam, Spyware, Malware, pc and internet security</description>
	<lastBuildDate>Fri, 30 Jul 2010 15:07:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>QuickTime Player Allows Movie Files to Trigger Malware Download</title>
		<link>http://www.spywaresecurity.net/2010/07/30/quicktime-player-allows-movie-files-to-trigger-malware-download/</link>
		<comments>http://www.spywaresecurity.net/2010/07/30/quicktime-player-allows-movie-files-to-trigger-malware-download/#comments</comments>
		<pubDate>Fri, 30 Jul 2010 15:07:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[




 Quicktime Player (version 7.6.6) allows movie files to trigger download of files, and cybercriminals are using this to download malware from malicious websites. Trend Micro Threat Research Engineer Benson Sy encountered two .MOV files (001 Dvdrip Salt.mov, salt dvdrpi [btjunkie][xtrancex].mov) that both used the recent movie, Salt of Angelina Jolie. It looks suspicious enough [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/30/quicktime-player-allows-movie-files-to-trigger-malware-download/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Redirectors in Compromised Sites Used in Spammed Messages</title>
		<link>http://www.spywaresecurity.net/2010/07/29/redirectors-in-compromised-sites-used-in-spammed-messages/</link>
		<comments>http://www.spywaresecurity.net/2010/07/29/redirectors-in-compromised-sites-used-in-spammed-messages/#comments</comments>
		<pubDate>Thu, 29 Jul 2010 02:07:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Exploit]]></category>
		<category><![CDATA[SPAM]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[




 Busy day in TrendLabs today, first the full analysis of and news on ZeuS and SALITY, which are exploiting the Windows shortcut vulnerability. Now we’ve identified a ton of compromised websites leading to an “online pharmacy.” We’re currently seeing a wave of fake pharma spam that do not directly advertise the URL of the [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/29/redirectors-in-compromised-sites-used-in-spammed-messages/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Redirectors in Compromised Sites Used in Spam Messages</title>
		<link>http://www.spywaresecurity.net/2010/07/28/redirectors-in-compromised-sites-used-in-spam-messages/</link>
		<comments>http://www.spywaresecurity.net/2010/07/28/redirectors-in-compromised-sites-used-in-spam-messages/#comments</comments>
		<pubDate>Wed, 28 Jul 2010 08:07:08 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Exploit]]></category>
		<category><![CDATA[SPAM]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[




 Busy day in TrendLabs today, first the full analysis and news that ZeuS and SALITY are exploiting the Windows Shortcut vulnerability, and now we&#8217;ve identified a ton of compromised web sites leading to an &#8220;online pharmacy&#8221;. We&#8217;re currently seeing a wave of fake pharma spam emails which do not directly advertise the URL of [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/28/redirectors-in-compromised-sites-used-in-spam-messages/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A Look at ZBOT 2.0 Information Theft</title>
		<link>http://www.spywaresecurity.net/2010/07/28/a-look-at-zbot-2-0-information-theft/</link>
		<comments>http://www.spywaresecurity.net/2010/07/28/a-look-at-zbot-2-0-information-theft/#comments</comments>
		<pubDate>Wed, 28 Jul 2010 10:07:35 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[TSPY_ZBOT.CQJ is one of the new ZeuS/ZBOT 2.0 variants spotted earlier this year. Let’s take a look at one of the methods it uses to steal users’ banking credentials. These new ZBOT variants intercept the information users enter into a bank’s Web page by inserting predefined JavaScript code into the said page. At present, this [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/28/a-look-at-zbot-2-0-information-theft/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Redirectors in Compromised Sites Used in Spam Mails</title>
		<link>http://www.spywaresecurity.net/2010/07/27/redirectors-in-compromised-sites-used-in-spam-mails/</link>
		<comments>http://www.spywaresecurity.net/2010/07/27/redirectors-in-compromised-sites-used-in-spam-mails/#comments</comments>
		<pubDate>Tue, 27 Jul 2010 13:07:14 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Exploit]]></category>
		<category><![CDATA[SPAM]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Busy day in TrendLabs today, first the full analysis and news that ZeuS and SALITY are exploiting the Windows Shortcut vulnerability, and now we&#8217;ve identified a ton of compromised web sites leading to an &#8220;online pharmacy&#8221;. We&#8217;re currently seeing a wave of fake pharma spam emails which do not directly advertise the URL of the [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/27/redirectors-in-compromised-sites-used-in-spam-mails/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ZeuS/ZBOT and SALITY Jump on the LNK Exploit Bandwagon</title>
		<link>http://www.spywaresecurity.net/2010/07/27/zeuszbot-and-sality-jump-on-the-lnk-exploit-bandwagon/</link>
		<comments>http://www.spywaresecurity.net/2010/07/27/zeuszbot-and-sality-jump-on-the-lnk-exploit-bandwagon/#comments</comments>
		<pubDate>Tue, 27 Jul 2010 13:07:32 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Exploit]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SPAM]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[As reported last week, exploits targeting the Windows shortcut zero-day vulnerability have risen in number. It is also now being used to spread ZBOT variants via malicious attachments to spammed messages, now blocked by Trend Micro products, with the subject Microsoft Windows Security Advisory and the following message: The message claims to come from Microsoft [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/27/zeuszbot-and-sality-jump-on-the-lnk-exploit-bandwagon/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Avoiding the Whack-a-Mole Anti-Phishing Tactic</title>
		<link>http://www.spywaresecurity.net/2010/07/26/avoiding-the-whack-a-mole-anti-phishing-tactic/</link>
		<comments>http://www.spywaresecurity.net/2010/07/26/avoiding-the-whack-a-mole-anti-phishing-tactic/#comments</comments>
		<pubDate>Mon, 26 Jul 2010 07:07:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Imagine playing a whack-a-mole game where the mole moves to a different hole in the amount of time it takes one to raise and lower a mallet. Instead of just six holes, however, there are millions. Few would want to play such a game. People would rightfully conclude that random attempts to hit the mole [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/26/avoiding-the-whack-a-mole-anti-phishing-tactic/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Exploits For Windows Shortcut Vulnerability In The Wild</title>
		<link>http://www.spywaresecurity.net/2010/07/22/exploits-for-windows-shortcut-vulnerability-in-the-wild/</link>
		<comments>http://www.spywaresecurity.net/2010/07/22/exploits-for-windows-shortcut-vulnerability-in-the-wild/#comments</comments>
		<pubDate>Thu, 22 Jul 2010 13:07:38 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Exploit]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[  Exploits for the recently discovered Windows shortcut vulnerability are now fully out in the wild and affecting users. While earlier samples were seen in more narrowly targeted attacks, the new samples seen by Trend Micro analysts are now aimed at broader audiences and now pose a threat to users at large. Indonesia and India [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/22/exploits-for-windows-shortcut-vulnerability-in-the-wild/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Spammed IM Link to Fake Facebook Image Leads to Malware</title>
		<link>http://www.spywaresecurity.net/2010/07/22/spammed-im-link-to-fake-facebook-image-leads-to-malware/</link>
		<comments>http://www.spywaresecurity.net/2010/07/22/spammed-im-link-to-fake-facebook-image-leads-to-malware/#comments</comments>
		<pubDate>Thu, 22 Jul 2010 10:07:31 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[SPAM]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Advanced threats researcher Jonell Baltazar recently spotted an instant message that contains a link to a malicious page. The use of instant messages to spread malware is no longer new; neither is the use of URL shorteners. What is somewhat unusual is how these URL shorteners were used. The URL shortener used in this attack, [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/22/spammed-im-link-to-fake-facebook-image-leads-to-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ATMs Now High-Profile Cybercrime Targets</title>
		<link>http://www.spywaresecurity.net/2010/07/21/atms-now-high-profile-cybercrime-targets/</link>
		<comments>http://www.spywaresecurity.net/2010/07/21/atms-now-high-profile-cybercrime-targets/#comments</comments>
		<pubDate>Wed, 21 Jul 2010 16:07:16 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Malware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Automated Teller Machines (ATMs) are now targets for criminals of all sorts. After all, as the famous saying goes, that&#8217;s where the money is. One common way to attack ATMs is via skimmers, devices that steal the data encoded on the magnetic strips of ATM cards. They can take a wide variety of form factors, [...]]]></description>
		<wfw:commentRss>http://www.spywaresecurity.net/2010/07/21/atms-now-high-profile-cybercrime-targets/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
