SEARCH RESULTS
 
Showing 1-10 of 520 records
 
Expand article

Cached Malware Embedded Sites

The Article has images
2007-12-16 18:18:26 by HASH0x8a09e44 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites who were cleaned before they could be analyzed, mainly popular sites who get crawled several times daily. However, Yahoo's and MSN's search engines, with MSN providing Archive.org type of historical crawling content, have been an invaluable resource in providing the actionable historical intelligence in the form of what was embedded at...
 
Tags: sites, sites wrongly, web sites, malware, malicious site, site, single site offers, sites notification services, popular sites
 
 
 
 
Expand article

Fake Porn Sites Serving Malware - Part Two

The Article has images
2008-07-08 03:24:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites. And since some of the fake sites are actual redirectors, periodically revisting them leads to more fake codecs and even more actionable intelligence into the nature of their practices, and which are the ISPs proving them with hosting services for several consecutive years The main redirector in this campaign popular-adult.com is also...
 
Tags: net, malware, porn-party, porn-contact, fake porn sites, porn-play, porn-plus, porndrive, pornhelp
 
 
 
 
Expand article

Monetizing Compromised Web Sites

The Article has images
2008-07-14 03:26:24 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites are largely getting monetized these days, starting from hosting blackhat SEO junk pages, to redirecting to live exploit URLs and fake codecs where revenue is earned through their participation in an affiliate business model With The Africa Middle Market Fund's site monetized by web site defacers who defaced it "in between" the blackhat...
 
Tags: sites, rogue sites, web, net, web site defacers, site, fake porn sites, profile site, redirector
 
 
 
 
Expand article

More CNET Sites Under IFRAME Attack

The Article has images
2008-03-06 10:50:57 by HASH0x8b1424c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites are involved in the campaign, including ZDNet's international sites such as, ZDNet India, ZDNet U.K, and ZDNet Australia, but the abovementioned ones. And so, we have three more sites part of CNET Networks' portfolio, getting injected with more IFRAMEs, abusing their search engine's local caching, and storing of any keyword feature , in...
 
Tags: iframe, cnet sites, sites, iframe-ed pages, pages, cnet, iframe redirects, iframe campaign, campaign
 
 
 
 
Expand article

Fake Porn Sites Serving Malware

The Article has images
2008-06-25 12:16:20 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites, consisting of over twenty different domains serving the usual Zlob malware variants, we have a decent abuse of a template for a porn site The easy of management of such domain farms and the availability of templates for high trafficked topic segments such as celebrities and pornography, continue contributing to the increasing number...
 
Tags: net, fake porn sites, malware, about-adult, scan-porn, zlob malware variant, name-adult, useporn, porn-the
 
 
 
 
Expand article

Lithuania Attacked by Russian Hacktivists, 300 Sites Defaced

The Article has images
2008-07-07 01:19:13 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites hosted on the same ISP, an upcoming attack that was largely anticipated due to the on purposely escalated online tensions out of Lithuan's accepted legislation banning communist symbols across the counry, once again demonstrates information warfare building capabilities in action Moreover, the attack is again relying on common...
 
Tags: lithuania, attack lithuania surprisingly, estonia, estonia attack, sites, attack, attack strategy, attacks based, attacks
 
 
 
 
Expand article

More High Profile Sites IFRAME Injected

The Article has images
2008-03-12 09:49:36 by HASH0x8b74b5c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites targeted by the same group within the past 48 hours, with number of locally cached and IFRAME injected pages within their search engines NCSU Libraries - lib.ncsu.edu - 372,000 pages FullDownloads.us - fulldownloads.us - 13,000 pages Central Statistics Office Ireland - cso.ie - 10,300 pages DBLife Frontpage - dblife.cs.wisc.edu -...
 
Tags: info, info txmwxb, info kbsxet, info bhrsaa, info sezejc, info cgjttz, info wmtwes, info cqqxkh, info qwhhxq
 
 
 
 
Expand article

Web-based malware on legit sites soars

2008-06-08 06:50:05 by Editor in Digg / Security
 
Study found 68 percent of all internet-based malware was now being hosted on legitimate sites."The compromise techniques being used now allow hackers to quickly 'colonise' thousands of legitimate sites, from big brand-name sites, to smaller but equally legitimate sites
 
Tags: sites, brand-name sites, malware, compromise techniques, thousands, percent, colonise, study, quickly
 
 
 
 
Expand article

Pro-Serbian Hacktivists Attacking Albanian Web Sites

The Article has images
2008-05-20 15:21:47 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sites, and building up capabilities by releasing a list of vulnerable Albanian sites (remote SQL injections for remote file inclusion, defacements or installing web shells/backdoors ) to assist supports into importing the list within their do-it-yourself web site defacement tools Go through the complete post - Pro-Serbian hacktivists...
 
Tags: hacktivists, pro-kosovo hacktivists, pro-serbian, pro-serbian hacktivists, turkish hacktivists, albanian web sites, albanian sites, vulnerable albanian sites, hacktivism tensions