Free Republic

SNIPPET: "UPDATED - Wednesday, October 28, 2009: A "New Facebook Login System" spam campaign is in circulation, launched by the same botnet. Sampled updatetool.exe once again interacts with the Zeus command and control at 193.104.27.42."

SNIPPET: "I guess it was inevitable. With the growth in SaaS (Software as a Service), it was only a matter of time before we saw CaaS - Crimeware as a Service. Criminal gangs are now offering services such as DDOS attacks, botnet rental, malware creation and electronic money laundering. And then there are the more exclusive, targeted services such as whaling to attack high net worth individuals and organisations. CaaS is one of the emerging threats associated with organised cybercrime, which is at the top of the latest Information Security Forum (ISF) Threat Horizon 2011 report." Permalink: http://www.infosecurityadviser.com/view_message?id=138

For a few hours late last week, visitors to the Bank of India Web site had their browsers covertly redirected to a site hosting malicious exploits. Increasingly, criminals, often without any technical experience, are defacing popular Web sites with code that allows them to direct your browser to download content without you even knowing. Finjan, a security company that's been on the cutting edge of detecting Web 2.0 malware, identifies 10 toolkits for sale on the Internet, up from earlier this year. If you are an online criminal these days, says Yuval Ben-Itzhak, CTO of Finjan, "you are buying a...

A recently revealed image rendering vulnerability related to Windows Meta Files made it easier for phishers to spread software designed for a criminal enterprise, such as identity theft. The number of sites distributing "crimeware" or software engineered for criminal activity like identity theft or information fraud nearly doubled in December, rising from 4,630 in November to 7,197 the following month, according to a report issued Tuesday, February 14 by the AntiPhishing Working Group (APWG). APWG Chairperson David Jevans said, "The speed, precision and massive scale by which the phishers were able to identify and exploit this vulnerability for criminal enterprise...