Home > The SC Magazine Newsteam Blog
The SC Magazine Newsteam Blog

Is RBN behind the latest Adobe PDF attacks?

time Posted October 30, 2007 * Comments(0)

The Russian Business Network, the shadowy St. Petersburg, Russia-based ISP, is getting a very bad rap lately in the media.

And rightfully so. Experts believe the RBN is largely behind the Adobe rootkit attacks, which take advantage of a recently patched vulnerability, among other active exploits.

But Matt Richard, the newly appointed director of the Rapid Response Team at VeriSign iDefense, told me in an email that other hosting providers are also to blame.

“In fact, the heart of this attack centers around a U.S. corporation known to provide hosting support for adult sites and other shady organizations,” Richard wrote. “In addition, they accept a number of interesting payment options, including wire transfer and WebMoney. They have ICQ (instant messaging computing) contacts for support and are advertised on a number of forums frequented by cybercriminals. They offer support in English and Russian.”

If we should take anything away from Richard, it’s that the cybercriminal underground has become very organized. While the RBN may be the one group receiving the most attention these days, there’s likely scores of others doing performing similar unscrupulous acts.

Patch, patch, patch.

Related Posts
  • Adobe patches dangerous flaw
    Today is turning into a minor version of "Patch Tuesday" for companies. Adobe announced today it ha...
  • Beware of PDF rootkit-laden spam
    It looks like PDF spam pushing pump-and-dump stocks and pharmaceuticals has died down, but the popul...
  • A much needed weekend, then, more patching pain
    If you're an IT administrator responsible for hundreds of machines, I didn't envy your job this week...
  • RealPlayer flaw patched - so patch!
  • Post DOS Stress Disorder

Filed under: Patch Management, Phishing, Rootkits, Spam, Trojans, Vulnerabilities

Compare and contrast - top 10 lists

time Posted October 2, 2007 * Comments(0)

Here are the top 10 email- and web-based malware threats for September, according to Sophos. You’ll notice that Netsky and the Pushdo trojan were the dominant email-based malware last month, and IFRAMEs were very popular as a web-based threat.

September 2007 email-based malware threats, according to Sophos:

1. W32/Netsky 29.9%
2. Troj/Pushdo 27.4%
3. W32/Mytob 9.2%
4. W32/Zafi 8.3%
5. Mal/Iframe 6.0%
6. Mal/Behav 4.6%
7. W32/MyDoom 4.1%
8. Mal/Basine 2.5%
9. W32/Bagle 1.4%
10. W32/Traxg 1.2%
Other 5.4%

September 2007 web-based malware threats, according to Sophos:

1. Mal/Iframe 59.5%
2. Mal/ObfJS 17.0%
3. Troj/Decdec 3.7%
4. Troj/Fujif 3.6%
5. Mal/EncPk 1.6%
6. Troj/Iffy 1.3%
7. Troj/Pintadd 1.3%
8. Troj/Psyme 1.0%
9. Mal/Packer 0.9%
10. Troj/Ifradv 0.8%
Other 9.3%

Related Posts
  • Money mules growing in presence; and an SC Christmas thought
    If in the past, online financial fraud was the work of one or two people, those days are long gone. ...
  • Waiting for the iPhone, in the middle of the night
    Last night, after dinner and a few post-work cocktails, my twin brother, our friend Dan and I had th...
  • The DVD version of my report on Sen. Obama’s cybersecurity speech
    Last Thursday, I wrote a news article for the SC website covering a speech on cybersecurity that Sen...
  • A study in contrast: TJX and Hannaford

Filed under: Email Security, Emerging threats, Industry reports, Mobile and Endpoint Security, Rootkits, Trojans, Worms

Tony Soprano and cybercrime have more in common than you think

time Posted April 8, 2007 * Comments(0)

It’s a red-letter day if you’re a fan of the HBO drama “The Sopranos,” as the acclaimed New Jersey mob drama kicks off its final nine episodes tonight.

If you’re a fan of the show, as I am, you know this season picks up with uncertainty hanging over Tony and the gang like an April cold front, and a climactic (and some guess too violent) seems to be in the cards.

But how realistic is the show? While its main character once tried to convince his daughter on a college visit that “the Mafia doesn’t exist,” readers of SC Magazine know in no uncertain terms that organized crime is out there – and the bosses are just as interested in obtaining personally identifiable information as shaking down the local restaurant owners.

So will Tony encourage Christopher to build more effective keyloggers, or will a non-made henchman get whacked for not sharing stolen TJX credit card details with his capo? Probably not, but stranger things have happened during the show’s nine-year run.

Related Posts
  • Will a Sopranos sequel feature cybercrime?
    In early April, we mentioned on the News Team Blog that if Tony Soprano was a non-fictional gangster...
  • Sopranos/IT security prediction falls just short
    When I posted yesterday on the News Team Blog saying that maybe, just maybe information security wou...
  • Will an illegal immigration crackdown boost cybercrime?
    Illegal immigration, almost exclusively on the Republican side of the coin, has become the hot-butt...
  • The locals are catching on
  • ID theft gang takedown signifies progress

Filed under: Breaches, Consumer threats, Groundbreakers and newsmakers, Industry reports, Lawbreakers, Phishing, Rootkits

time The SC Magazine Newsteam Blog

Search This Blog:  


Categories
  • Apple
  • Breaches
  • Browser flaws
  • Compliance
  • Consumer threats
  • Education
  • Email Security
  • Emerging threats
  • Finance
  • Government
  • Groundbreakers and newsmakers
  • Health care
  • High tech
  • IM
  • Industry reports
  • Lawbreakers
  • Legal and professional services
  • Manufacturing
  • Mergers and acquisitions
  • Microsoft
  • Mobile and Endpoint Security
  • Non-Microsoft patches
  • Non-profit
  • Open source
  • Opinion
  • Patch Management
  • Patch Tuesday
  • Personnel moves
  • Phishing
  • Piracy
  • Privacy
  • Product news
  • Rootkits
  • SC Magazine
  • SC Magazine Blogs
  • Spam
  • The insider threat
  • Trojans
  • Uncategorized
  • Vista
  • Vulnerabilities
  • Worms
Authors
  • Angela Moscaritolo (1)
  • Chuck Miller (9)
  • Dan Kaplan (45)
  • Greg Masters (17)
  • Jim Carr (1)
Archives
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008
  • February 2008
  • January 2008
  • December 2007
  • November 2007
  • October 2007
  • September 2007
  • August 2007
  • July 2007
  • June 2007
  • May 2007
  • April 2007
  • Blogroll

    • Anton Chuvakin Blog
    • Computer Defense
    • Hacker Webzine
    • MacUser
    • Marco Ramilli’s Blog
    • Michael R. Farnum
    • SecGuru
    • The IT Security Guy
    • WordPress.com
    • WordPress.org
Home | News | Newsletters | Products | Blogs | Lists | Jobs | Events | Subscribe | Contact Us | About Us | Advertising | Editorial | Subscribe to our RSS feedsRSS

This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.

Your use of this website constitutes acceptance of Haymarket Media's Privacy Policy and Terms & Conditions