SEARCH RESULTS
 
Showing 1-10 of 57 records
 
Expand article

The Neosploit Malware Kit Updated with Snapshot ActiveX Exploit

The Article has images
2008-07-15 17:18:32 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kit? Now that's interesting given that there are other modified versions of the publicly available malware kit empowered with exploits as they get released, the single most logical move a administrator of such kit would do is diversity the exploits set as often as possible, keeping it up to date - like they do. ThreatCon is raised already ...
 
Tags: neosploit malware kit, malware kit, nuclear malware kit, kit, metaphisher malware kit, icepack malware kit, nuclear grabber kit, apophis kit, neosploit exploit kit
 
 
 
 
Expand article

The FirePack Exploitation Kit - Part Two

The Article has images
2008-04-27 04:27:00 by HASH0x8ae4cf0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kits cash bubble popped already? A recently released, yet another proprietary version of the Firepack malware exploitation kit and its largely decreased price from the original one, which in February was $3000, speaks for itself. Firepack's original version was a great example of biased exclusiveness on behalf of the malicious parties,...
 
Tags: nuclear malware kit, malware kit, kit, metaphisher malware kit, icepack malware kit, original firepack kit, malware exploitation kit, php, scanners result
 
 
 
 
Expand article

The Small Pack Web Malware Exploitation Kit

The Article has images
2008-05-19 03:41:55 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kit has been released at the beginning of this month, further indicating that the efficient supply of such kits is proportional to their simplistic nature. The only differentiation factor in the Small Pack is perhaps the inclusion of all known Opera exploits up to version 9.20, however, the rest of the features are the natural ones included...
 
Tags: malware, malware exploitation kit, nuclear malware kit, opera exploits, opera, metaphisher malware kit, exploits, firepack exploitation kit, icepack malware kit
 
 
 
 
Expand article

The FirePack Web Malware Exploitation Kit

The Article has images
2008-02-20 08:38:26 by HASH0x8b2b43c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kit. In a frontal competition attack aimed at IcePack , the authors of FirePack are pitching yet another "copycat" web exploitation malware kit for purchase at $3,000. Why a copycat anyway? Mainly because it lacks any major differentiation factors next to both, IcePack and MPack , except of course the different javascript obfuscation...
 
Tags: nuclear malware kit, malware kit, kit, metaphisher malware kit, malware exploitation kit, malware kits permanently, javascript obfuscation technique, source malware kits, major differentiation factors
 
 
 
 
Expand article

Web Email Exploitation Kit in the Wild

The Article has images
2008-04-16 13:42:23 by HASH0x8ab1c88 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kit is great example of customization applied to publicly known XSS vulnerabilities within a segmented set of web sites, email providers in this case The kit's pitch automatically translated Ie script contains vulnerability to 15 - not the most popular Russian postal services (except buy), and one of the largest foreign mail servers that...
 
Tags: xss vulnerabilities, vulnerabilities, kit, day xss vulnerabilities, xss exploitation kit, xss, xss exploitation, mail server, mail
 
 
 
 
Expand article

The Random JS Malware Exploitation Kit

The Article has images
2008-01-15 20:49:56 by HASH0x8be7244 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kit as originally named by Finjan , is perhaps the first publicly announced malicious innovation for 2008, in fact I've managed to obtain a copy of a sample .js and witness the filename change on the next request combined with complete disappearance of any .js on the third visit. Here's some press coverage - " Over 10,000 trusted websites...
 
Tags: random, malware, random attack approach, cgi, local malware locations, cgi-bincert, cgi-binss, cgi-binoptions, cgi-binpstore
 
 
 
 
Expand article

Great Fear-Mongering Product: Subway Emergency Kit

2008-06-09 12:11:30 by schneier in Schneier on Security
 
...Kit can aid you in seeing and breathing while exiting. This all-in-one compact, portable and easy to use subway emergency kit contains some items never seen before in a kit This could have won my Third Movie-Plot Threat Contest
 
Tags: subway emergency kit, kit, emergency, train fire, fire, paper towel, movie-plot threat, all-in-one compact, protection
 
 
 
 
Expand article

The FirePack Exploitation Kit Localized to Chinese

The Article has images
2008-05-13 08:28:54 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kits is continuing to receive the attention of malicious attackers, the Chinese underground in particular. Starting from MPack and IcePack's original localizations to Chinese, the FirePack exploitation kit is the latest one to have been recently localized to Chinese , and the trend is only starting to emerge What is prompting Chinese users...
 
Tags: chinese, firepack exploitation kit, kit, chinese users, chinese underground, internaltional underground community, native language, malicious attackers, source malware
 
 
 
 
Expand article

The Zeus Crimeware Kit Vulnerable to Remotely Exploitable Flaw

The Article has images
2008-06-18 17:45:15 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...kits and phishing pages, you have cyber criminals looking for ways to obtain access to the most popular exploitation kits and bankers malware C&Cs by finding vulnerabilities within them Apparently, Zeus, the crimeware kit which I discussed in a previous post, is susceptible to a remotely exploitable vulnerability according to a proof of...
 
Tags: zeus, russian business network, crimeware kit, zeus users, vulnerability, vulnerability research, kit, security community, security community starts