Archive for March, 2007

Today’s Other Malware Threat: IE7.0.exe

March 29, 2007 by Jose Nazario

Lest you think that the ANI thing was the only thing going on today, you’d miss the other part of today’s entertainment. There’s a new Trojan spam going around trying to entice you to download MSFT IE7.0 Beta 2 (never mind that it’s been released). This is, in fact, a new Trojan (Grum) and appears […]

Read More

Any ANI File Could Infect You!

March 29, 2007 by Jose Nazario

It’s been a busy day in the ASERT team office. Brand spanking new Windows vulnerability to shake up the past several days of minor notes and issues. Animated cursors, objects on web pages or embedded in emails, malicious files … malware downloaded and launched. Sound familiar? It should be, this feels like last year’s IE […]

Read More

Network Transactions

March 16, 2007 by Douglas Fleming

I have been spending quite some time understanding what the meaning of network transactions is to my customers, and the differences have been fascinating to explore. As more and more information moves around in the network, and the nature of that information is more readily available and potentially private to both personal users and […]

Read More

Become a Spam Bot — For Free!

March 16, 2007 by Jose Nazario

Several pieces of malware I’ve been investigating lately are spambots, tools that turn your computer into a source of spam for the folks running such operations. This one I got this morning first looked like a Nurech spambot, but it turned out to be a simple downloader. Standard-type lure, this one claimed to be from […]

Read More

Release - Infosec OPML List 1.0

March 9, 2007 by Jose Nazario

One things I built for myself a number of years ago is Infosec Daily, an information security news aggregation site. I had to keep abreast of sites and topics and I found that it was easier to build an application to do it than to keep trying to dig up the latest story when I […]

Read More