Skip to main content

Viruses & Malware

Koobface Variant Hits Facebook, Targets Other Social Networks

posted onMarch 2, 2009
by hitbsecnews

Researchers at Trend Micro are reporting that a new variant of the Koobface worm is spreading on Facebook.

Koobface first appeared in 2008, with separate variants striking members of Facebook and MySpace.com. Now the Koobface worm is back again, with an eye toward stealing cookies for other social networking sites.

Downadup worm may hammer Southwest Airlines URL March 13

posted onMarch 1, 2009
by hitbsecnews

Computers infected by the Downadup worm will "phone home" to several legitimate URLs this month, including one owned by Southwest Airlines, potentially disrupting those sites, a security researcher said Sunday.

According to a researcher at Sophos Plc., the Downadup worm -- also known as Conficker -- will try to contact wnsux.com on March 13 for further instructions. That URL, however, is owned by Southwest Airlines, and redirects visitors to the airline's primary southwest.com address.

Google's DoubleClick spreads malicious ads (again)

posted onFebruary 25, 2009
by hitbsecnews

Google's DoubleClick ad network has once again been caught distributing malicious banner displays, this time on the home page of eWeek.

Unsuspecting end users who browse the Ziff Davis Enterprise Holdings-owned site were presented with malvertisements with invisible iframes that redirect them to attack websites, according to researchers at Websense. The redirects use one of two methods to infect users with malware, including rogue anti-virus software.

Conficker goes B++

posted onFebruary 24, 2009
by hitbsecnews

Malware writers have created a new version of the Conficker worm that no longer needs to phone home to download its malware package.

Dubbed Conficker B++, the new strain opens a backdoor on the infected machine allowing hackers to push out updates directly to the worm, without it needing to contact a remote server first.

eBay solutions provider Auctiva.com infected with malware

posted onFebruary 23, 2009
by hitbsecnews

eBay solutions provider Auctiva.com suffered a malware attack during the weekend, resulting in a “this site may harm your computer” badware warning which affected hundreds of thousands of customers and their eBay auctions.

Following the complaints of users who started receiving antivirus software warnings appearing upon visiting Auctiva.com, the company took measures to ensure the transparency of the clean-up process which they finalized yesterday.

Faux Facebook App May Harbor Malware

posted onFebruary 23, 2009
by hitbsecnews

Hackers are targeting Facebook users with a hoax application that attempts to steal personal information for ID fraud. Security firm Sophos said a number of social networkers reported receieving notification messages saying their friends have had problems viewing their profile after they installed an app called 'Error Check System'.

Although the notifications were bogus and in this instance no sensitive data was stolen, Sophos says that may not be the case with other applications, especially since Facebook doesn't approve applications before they are made available on the site.

Scam Antivirus App Spreads Malware

posted onFebruary 22, 2009
by hitbsecnews

Web users have been warned about a new scam that posts fake product reviews in a bid to encourage people to buy a rogue security application called Anti-virus-1.

The app is one of a number of bogus security products which promise to provide protection against the latest online threats, but instead have been designed to spread malware or hold users' PCs to ransom.

New SMS Mobile Worm for Symbian?

posted onFebruary 21, 2009
by hitbsecnews

Symbian users watch out! It seems that a new SMS mobile work is out there and it affects Symbian phones. The new worm is called SymbOS/Yxes, or we can just call it Sexy View, and it affects Symbian S60 3rd Edition phones but it’s not guaranteed that others phones won’t be affected.

Conficker worm back with a vengeance

posted onFebruary 20, 2009
by hitbsecnews

Cybercriminals behind the widespread Conficker worm have released a new version of the malware that could signal a major shift in the way the worm operates.

The new variant, dubbed Conficker B++, was spotted three days ago by SRI International researchers, who published details of the new code on Thursday. To the untrained eye, the new variant looks almost identical to the previous version of the worm, Conficker B. But the B++ variant uses new techniques to download software, giving its creators more flexibility in what they can do with infected machines.

How to Write a Linux Virus in 5 Easy Steps

posted onFebruary 18, 2009
by hitbsecnews

It's easy for people to pick at Windows for being prone to virus and malware attacks. It's almost a given belief that if you're running a PC with a Windows operating system, you're much more susceptible to attacks than users with other operating systems.

But let's quickly look at the reasons for this. First, it isn't really Microsoft's fault. It isn't that Windows is technically inferior, it's that the majority of the world runs on Windows. This fact alone is very attractive for any virus coder or exploiter. As a vrius writer, you'd want to attack the majority, not the minority.