Сообщения

Сообщения за декабрь, 2014

New Malware Family Highlight: Kuluoz

Изображение
According to Palo Alto Networks ''Threat Landscape Review'', one particular malware family, Kuluoz (also known as Asprox), stands out as prevalent in the sample data. This single family accounts for 4.9 million malicious sessions recorded during the month of October 2014. It impacted 1,933 companies across 10 industries reviewed . Firewall WildFire identified a total of 268,084 unique samples determined to be Kuluoz, 82.4% of which had not been collected by VirusTotal at the time of analysis. The first version of Asprox appeared in 2007, and it was given its name by researchers who identified that it frequently tried to infect ASP (Active Server Pages) based websites. At the time the malware used command and control infrastructure hosted by the now-defunct McColo Corp ISP. By 2013, the primary components of Asprox had been replaced by a new malware family dubbed Kuluoz. While Asprox was an “all-in-one” malware, Kuluoz uses a modular design, which allows it

Malware Trends Affect Key Industries

Изображение
In its first Threat Landscape Review software security giant Palo Alto Networks takes a high-level view of how malware is delivered to networks across major industries around the world . The data used for this report was derived from WildFire™. The firewall application automatically identifies threats from malware over a wide array of applications by executing them in a virtual environment, observing their behavior. This data was collected from live systems in networks belonging to 2,363 different companies operating in 82 different countries. There are currently over 4,000 organizations using WildFire to defend their networks. The following are key findings from this report: Globally, the platform detected malware delivered in over 50 distinct applications. 87% of this malware was delivered over SMTP, 11.8% through Web-Browsing (HTTP) and 1.2% in the remaining applications. While all verticals saw SMTP and HTTP as the primary channels for mal

How Facebook Got Hacked

Изображение
  Zero-Day Exploit Bypassed Java Protections to Install Malware Even the most savvy information technologists aren't immune from cyber-attacks. Just ask Facebook. The social-media titan says it fell victim to a sophisticated attack discovered back in January 2013 in which an exploit allowed malware to be installed on employees' laptops. In a blog posted by Facebook Security, the company said it found no evidence that any of social network user's data was compromised. Here's what happened at Facebook according to the blog post: Several Facebook employees visited a mobile developer website that was compromised. The compromised website hosted an exploit that then allowed malware to be installed on these employees' laptops. "The laptops were fully-patched and running up-to-date anti-virus software," the blog says. "As soon as we discovered the presence of the malware, we remediated all infected machines, informed law enforcement and began a s

iPad Air Plus and the iPad mini 4 will launch between April and June 2015

Изображение
Despite of a slowdown in tablet sales for 2014 and a negative growth forecast for the iPad by the International Data Corporation (IDC), Apple Inc. is hell-bent on releasing new models of the iPad at an ever-increasing pace. The latest model rumored to be in the pipeline is the Apple “iPad Air Plus”. A leaked report, published on Friday in Japanese magazine Mac Fan , and picked up by Macotakara , shows what appears to be schematics and specs of Apple’s next iPad. The drawings show the tablet will sport a 12.2” LCD display and have dimensions of 305.31mm x 220.8mm x 7mm, or 12.2” x 8.7” x 0.28”. This is not far off from previous rumors of a 12.9” iPad from Apple . Another consideration to take into account is the viability of tablets over 12” in size and their target audience. Tablets are designed to be portable and easy to use, so the idea of increasing their size seems a little contradictory. That said, there are some arguments to be made in favor of large

Top-10 Cybersecurity Predictions of 2015

Изображение
U.S. Cyber Security Market Share [%] by Banking, Financial Services, Retail & Payment Services Industry Sector 2016   Healthcare at risk? As noted by Websense , healthcare data is valuable. Not only are companies such as Google, Samsung & Apple tapping into the industry, but the sector itself is becoming more reliant on electronic records and data analysis. As such, data stealing campaigns targeting hospitals and health institutions are likely to increase in the coming year. New players on the global cyberthreat field We have continual spats between the United States and China — each country accusing the other of state-sponsored cyberattacks — a flow of cybercrime reports from industry experts and a rising digital presence in countries like Russia, and so it is safe to assume we'll see more of the same in 2015.Cyber espionage can be lucrative where sensitive, corporate or government data is concerned, and when we live in a world where

Apple's hard-shelled & unbreachable iOS went under malware attack: meet WireLurker & ''Masque Attack''

Изображение
“ Even though this is the first time this is happening, it demonstrates to a lot of attackers that this is a method that can be used to crack through the hard shell that Apple has built around its iOS devices.” security expert Ryan Olson tells the New York Times . November 2014 may eventually become known as the ‘good ole days’ before iOS malware. That month the U.S. Government Computer Emergency Response Team (CERT) issued a warning to American businesses that iOS malware can be spread by phishing attacks, and that malicious apps may steal login credentials, access data, and monitor users’ devices. The electronic crime underground has begun exploiting iOS mobile devices and will intensify attacks on employees, making dynamic protection against malicious apps critically important. Introduction November 2014 will remain in the ''Digital History'' as a crucial point at which users of iPhone & iPad devices for the very first time faced serious malware