Archive for December, 2008

The End Of 2008 In A Few Sentences

December 31, 2008 by Jose Nazario

In these wee small hours of 2008, some quick thoughts.
Researchers have broken SSL CA root certificates via the MD5 collision issues. No great surprise, I think anyone who gave this some serious thought saw this coming. End of the world? No, not really. Invalid SSL certs rarely stop anyone. This will make it tougher to [...]

Read More

Follow the ASERT blog with Twitter

December 23, 2008 by Arbor Networks

Twitter is a free service that lets you keep in touch with people through the exchange of quick, frequent answers to one simple question: What are you doing? Join today to start receiving Arbor Networks updates, or add http://twitter.com/arbornetworks to your favorites!
UPDATED to fix the HREF. Thanks to all who noted it to us :)

Read More

New attack patterns emerge in 2009

December 23, 2008 by Arbor Networks

Botnets were just the beginning. The bad guys will continue to use these to try and steal your data, but more sophisticated attacks over the application layer and targeted network attacks are on the way.  In this Network World Podcast, Danny McPherson from Arbor Networks discusses the new ways that hackers will be trying to [...]

 
 New attack patterns emerge in 2009 [10:30m]: Play Now | Play in Popup | Download (794)
Read More

Another Holiday, Another E-Card Run – Waledec

December 21, 2008 by Jose Nazario

But this time it’s not Storm, nor does it even seem at all like Storm. This one is dubbed Waldec. Infection strategy: entice email users to come to the website and get a greeting card. No graphics, but it will entice you anyhow. “Daniel just mailed to you an Online greeting card.” Thanks, Daniel!
Subject lines [...]

Read More

Busy Little Phishing Botnet

December 14, 2008 by Jose Nazario

Today it’s an American Express phish. In the past few weeks it’s been JPMorgan Chase, Bank of America, CitiGroup, Colonial Bank, and many others. All of them are using fast flux hosting techniques on the same hosts. I don’t know the name of this botnet (either the malcode or the coloquial name) but it sure [...]

Read More