SEARCH RESULTS
 
Showing 1-10 of 14 records
 
Expand article

Malware Infected Hosts as Stepping Stones

The Article has images
2008-02-21 22:03:01 by HASH0x8b1f7bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones for any kind of cybercrime activities, as well as the foundation for other services such as the managed fast-flux provider I once exposed Stepping stones as a concept in cyberspace, can be used for various purposes such as, engineering cyber warfare tensions, virtual deception , hedging of risk of getting caught, or actually risk...
 
Tags: hosts, malware, socks hosts, malware infects hosts, top application, application, stones, top, activities
 
 
 
 
Expand article

Phishers, Spammers, and Malware Authors Clearly Consolidating

The Article has images
2007-12-09 21:14:53 by HASH0x89fa6a4 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones before reaching the final destination , with China's highly malware infected Internet population acting as the stepping-stone, not the original source of the attack Security researchers said the memorandum, which was obtained by The New York Times from an executive at a private company, included a list of Web and Internet addresses...
 
Tags: malware, malware attachments, malware attack, malware authors, hand malware authors, spammers, modern malware, storm worm malware, emails courtesy
 
 
 
 
Expand article

More trustworthy election systems via SDL?

2008-02-04 23:34:00 by sdl in The Security Development Lifecycle
 
...stones while living in a glass house, but that is not my intent. While Microsoft products are not vulnerability free, we continue to systematically analyze the sources of vulnerabilities in our software. We continue to modify our engineering practices and tools to better identify potential vulnerabilities and mitigate them before software is...
 
Tags: machine security concerns, security concerns, election systems, election, security, security researchers, election systems margin, margin, election management system
 
 
 
 
Expand article

Inside a Botnet's Phishing Activities

The Article has images
2008-02-25 09:34:49 by HASH0x8b44f48 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones , but also for the purpose of sending out phishing emails, and hosting the domains used in the scams themselves, thereby forwarding the responsibility for the scams to the infected parties, in between remaining relatively untraceable. The malware variants are still in the wild, and the ecosystem itself is currently active as well. Upon...
 
Tags: net, botnet, bkdr agent, agent, microsoft, hosts phone, domains, hosts, ecosystem
 
 
 
 
Expand article

Stiennon wants to know - it is all about execution

2008-03-21 01:15:44 by HASH0x8b48134 in StillSecure, After All These Years
 
...stones to ask what many of you would probably like to ask but wouldn't. Here is Rich's comment and my reply Posted by Stiennon: OK, so one well regarded security company turns out not to be that successful after all. As you point out Allen, from the press releases everything seemed like it was going great for Lockdown. As you know I think NAC...
 
Tags: stiennon, nac, richard nac, ignorant, ignorant richard, richard, richard stiennon, top richard, nac companies
 
 
 
 
Expand article

The Cyber Storm II Cyber Exercise

The Article has images
2008-04-03 12:29:03 by HASH0x8b6d0a8 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones Stolen and manipulated data is more valuable than destroyed data Lack of pragmatic blackhat mentality scenario building intelligence capabilities Unrestricted Warfare must be first understood as a concept, than anticipated as the real threat From a strategic perspective, securing and fortifying what you have control of is exactly what...
 
Tags: cyber warfare, passive cyber warfare, cyber warfare tensions, offensive cyber warfare, cyber warfare exercise, warfare, econonomic warfare, cyber warfare attacks, broader information warfare
 
 
 
 
Expand article

Stiennon wants to know - it is all about execution

2008-03-21 02:15:44 by ashimmy in StillSecure, After All These Years
 
...stones to ask what many of you would probably like to ask but wouldn't. Here is Rich's comment and my reply Posted by Stiennon: OK, so one well regarded security company turns out not to be that successful after all. As you point out Allen, from the press releases everything seemed like it was going great for Lockdown. As you know I think NAC...
 
Tags: stiennon, nac, richard nac, ignorant, ignorant richard, richard, richard stiennon, top richard, nac companies
 
 
 
 
Expand article

Phishing Tactics Evolving

The Article has images
2008-04-21 11:18:17 by HASH0x85bed5c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones these days, for OSINT or cyber espionage purposes, but also, for sending and hosting phishing pages, a tactic in which I'm seeing an increased interest as of recently. Here are some example of recently spammed phishing campaigns hosting the phishing pages on end user's PCs pool-71-116-244-232.lsanca.dsl-w.verizon.net...
 
Tags: halifax-online, halifax, mem binformslogin, user, user-142o3ds, web application vulnerabilities, mem binhalifax loginformslogin, vulnerable sites, turkish defacement
 
 
 
 
Expand article

Stealing Sensitive Databases Online - the SQL Style

The Article has images
2008-05-12 01:13:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...stones, hosting and distribution of malware and conducting OSINT for corporate espionage by segmenting the infected population into organizations of importance, or access to "the whole" benefits package coming with having a complete access over an Internet connected host
 
Tags: databases, pop e-shops, e-shops, site-specific vulnerability manner, specific vulnerability, complete access, malicious attackers, access, bad guys