Recent outbreak of MS08-67 worm, Downadup/Conflicker has already infected more than 9 million PCs. A special thing about this Microsoft Security Bulletin MS08-67 was that it was released out-of-band, it was given an “Exploitability Index Assessment” of “1 – Consistent exploit code likely” and it allows for Remote Code Execution, in numerous versions of Windows (particularly critical for 2000, XP, and Server 2003).

Read more »

Well this has nothing to do with Obama’s illegal links with underworld hacker community. But this has certainly to do with innocence of people w.r.t good security practices. Obama’s win has been used (rather misused) by hackers and Malware authors to social engineer people into clicking a link claiming to be a webpage containing details of Obama’s acceptance speech. But actually those webpages were some hacked websites used to distribute malicious rootkits

According to Mr. Singh the attackers had hacked into a well known travel site. It was then used to host an information-stealing Trojan Horse downloader file called ‘BarackObama.exe’. ‘BarackObama.exe’ executed and unpacked phishing kits locally..

Read more »

Just happened to come across this interesting article (PDF Format) discussing how in today’s world, we (BANK preferably) need to continue business with customers even though their systems are infected with different malwares. This paper discusses many of the best practices businesses can adopt for their Web application design and back-office support processes in order to minimize this growing threat, along with helping to reduce several of the risks posed with continuing to do business customers likely to be operating infected computers.

Read more »