We have recently come across a method of getting personal information that was interesting from the technical point of view. Our customer received an email saying that someone had used his Live ID to distribute unsolicited email, so his account would be blocked. The email suggested that, to prevent the account from being blocked, the […]

BREAKING NEWS! In a previous advisory, dated 5 January on online attacks, it was reported that CryptoLocker was one of the most dangerous of ransomware (see Definition).  It encrypts your files and asks a sum of money in exchange for the decryption key. CryptoLocker network was taken down by state authorities and private entities last […]

The MsnMM Campaigns [pdf] For over half a decade, the Naikon APT waged multiple attack campaigns on sensitive targets throughout South-eastern Asia and around the South China Sea. It maintained a heavy offensive focus on Myanmar, Vietnam, Singapore, the Philippines, Malaysia, and Laos. Targets and victims included ASEAN governmental agencies and government departments, investment enterprises, […]

When it comes to reporting on breaches involving customer accounts at major brands, the news media overall deserves an F-minus. Hardly a week goes by when I don’t hear from readers about a breathless story proclaiming that yet another household brand name company has been hacked. Upon closer inspection, the stories usually are based on […]

The onslaught of malware seems to be unstoppable.  Many of these malware campaigns use the ever popular Angler EK (exploit kit) to distribute different types of malware. Recently, it distributed a ransomware called AlphaCrypt, which seem to imitate TeslaCrypt, but operates like the infamous Cryptowall 3.0.  Soon after, the malicious payload changed.  It is an […]