Bank Account Logins for Sale, Courtesy of Citadel Botnet

Posts Tagged ‘mcafee’

Bank Account Logins for Sale, Courtesy of Citadel Botnet

By Perry Varanoid on Friday, May 17th, 2013 | No Comments

Financial theft is one of the most lucrative forms of cybercrime. Malware authors continue to deliver sophisticated tools and techniques to unlock online bank accounts.

EASI — Real Time for ePO

By Perry Varanoid on Wednesday, May 15th, 2013 | No Comments

This video contains instructions for installing, setting up and using Real Time for ePO.

Travnet Botnet Controls Victims With Remote Admin Tool

By Perry Varanoid on Tuesday, May 14th, 2013 | No Comments

The malicious binary behind the Travnet botnet has been updated. The new code has a new compression algorithm, steals the list of running processes, adds new file extensions to its list of files to steal, and has improved its control commands.

Microsoft Releases Advance Notification for May 2013 Security Bulletin

By Perry Varanoid on Thursday, May 9th, 2013 | No Comments

Original release date: May 09, 2013 Microsoft has issued a Security Bulletin Advanced Notification indicating that its May release will contain 10 bulletins. These bulletins will have the severity rating of critical and important and will be for Microsoft Windows, Office, Internet Explorer, .NET Framework, Lync, and Windows Essentials. These bulletins are scheduled for release on May 14, 2013. US-CERT will provide additional information as it becomes available. This product is provided subject to this Notification and this Privacy & Use policy

Microsoft Releases May 2013 Security Bulletin

By Perry Varanoid on Thursday, May 9th, 2013 | No Comments

Original release date: May 09, 2013 | Last revised: May 14, 2013 Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, .NET Framework, Lync, Office, and Windows Essentials as part of the Microsoft Security Bulletin Summary for May 2013 . These vulnerabilities could allow remote code execution, denial of service, spoofing, information disclosure, or elevation of privilege.

NCCDC 2013 – Red Team Recap

By Perry Varanoid on Wednesday, May 8th, 2013 | No Comments

This past April (4/19 to 4/21) I had the great pleasure and experience of joining the Red Team at 9 th NCCDC competition . It was actually my 2 nd year on the Red Team and 4 th year to attend in total (I judged in 2010 and 2011). McAfee is actually a perpetual sponsor of this event. That being said, I have my own selfish agenda when I attend.

Emerging ‘Stack Pivoting’ Exploits Bypass Common Security

By Perry Varanoid on Monday, May 6th, 2013 | No Comments

[This blog was primarily written by Xiaoning Li of Intel Labs, with assistance from Peter Szor of McAfee Labs.] In February 2013, the Adobe Product Security Incident Response Team (PSIRT) released security advisory APSA13-02.

SB13-126: Vulnerability Summary for the Week of April 30, 2013

By Perry Varanoid on Monday, May 6th, 2013 | No Comments

Original release date: May 06, 2013 The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT).

Tracking PDF Usage Poses a Security Problem

By Perry Varanoid on Friday, April 26th, 2013 | No Comments

Looking back this year’s RSA Conference, you might have the feeling that the current threat landscape is primarily a series of advanced attacks. This concept includes well-known advanced persistent threats (APTs) and zero-day vulnerability exploits

Travnet Botnet Steals Huge Amount of Sensitive Data

By Perry Varanoid on Wednesday, April 24th, 2013 | No Comments

In a McAfee Labs blog by my colleague Vikas Taneja last month, he discussed high-level functioning in the malware Travnet.

Posts Tagged ‘mcafee’