Home » January 16th, 2009 Entries posted on “January, 2009”

China’s Yeepay.com Suffers Internet Payment Hacker Attack

Chinese Internet payment platform Yeepay.com says starting at 16:20 on January 14, 2009, the company’s official website experienced large-scale hacker attacks. A spokesperson from Yeepay.com has confirmed to local media that these are organized hacker attacks targeted at Yeepay.com’s official website and payment servers and the attack traffic at one point once reached 10 gigabytes [...]

| | Read More »

U.S. plots major upgrade to Internet router security

The U.S. federal government is accelerating its efforts to secure the Internet’s routing system, with plans this year for the Department of Homeland Security to quadruple its investment in research aimed at adding digital signatures to router communications. DHS says its routing security effort will prevent routing hijack attacks as well as accidental misconfigurations of [...]

| | Read More »

Storm Botnet Makes A Comeback

It’s official: Storm is back. The notorious botnet that ballooned into one of the biggest botnets ever and then basically disappeared for months last year is rebuilding — with all-new malware and a more sustainable architecture less likely to be infiltrated and shut down. Researchers during the past weeks have been speculating about similarities between [...]

| | Read More »

Paris Hilton’s official web site serving malware

The official web site of Paris Hilton (parishilton.com) has been embedded with a malicious iFrame, automatically exposing visitors to client-side vulnerabilities and banker malware, according to researchers from ScanSafe. Upon closer analysis, it appears that the site has been infected on the 8th of January, Thursday, becoming the very latest legitimate site whose use of [...]

| | Read More »

Microsoft, Oracle Issue Patches, While Zero-Day Exploits Surface

Following a frantic December that featured an emergency patch for Internet Explorer, Windows administrators may be looking forward to a month with fewer security worries. And it might appear that they’re getting a break: Microsoft (NSDQ: MSFT) on its Patch Tuesday released its January Security Bulletin featuring only one bulletin that addresses three vulnerabilities. [Information [...]

| | Read More »

Emerging markets face higher cyberthreat risk

Emerging markets such as the BRIC (Brazil, Russia, India and China) economies are at higher risk of being exposed to cyberthreats, according to a new report from security vendor MessageLabs. Released Wednesday, the MessageLabs Intelligence: 2008 Annual Security Report noted that Brazil had the world’s biggest share of global bots, at nearly 10 percent. Turkey [...]

| | Read More »

Commonly used tools of the Chinese hacker

ChinaByte just released an article on commonly used “Security Software” that is domestically produced: 1) 溯雪 (Snow Trace) – Password decoder 2) 乱刀 (Chaotic Knife) – Password analyzer for UNIX [Full list at the Dark Visitor Blog]

| | Read More »

Disclosure of information vulnerability in Safari

I have discovered that Apple’s Safari browser is vulnerable to an attack that allows a malicious web site to read files on a user’s hard drive without user intervention. This can be used to gain access to sensitive information stored on the user’s computer, such as emails, passwords, or cookies that could be used to [...]

| | Read More »

‘Huge increase’ in worm attacks plague unpatched Windows PCs

A computer worm that exploits a Windows bug Microsoft Corp. patched more than two months ago continues to wreak havoc, a security company said today, as it boosted its overall threat ranking and warned users to patch their PCs. “We’ve seen a huge increase in the number of [malware] samples, as well as infections,” said [...]

| | Read More »

Paris Hilton’s Web Site Being Used in Web Attack

Paris Hilton’s Web site has been hacked and is serving visitors a malicious Trojan program designed to steal sensitive information from their computers. The hack was discovered by security vendor ScanSafe, which said that Parishilton.com (note: this site is not safe to visit as of press time) had apparently been compromised since Friday. Visitors to [...]

| | Read More »