Law Firms and PR Groups Targeted in Spear Phishing Attacks

by Erin on November 18th, 2009 in Industry and Security News, Security Alerts.

The U.S. Federal Bureau of Investigation has issued a new advisory for law firms and PR companies to take heed of:

By way of an ongoing FBI investigation, it’s been found that hackers are increasingly targeting U.S. law firms and public relations groups with spear phishing e-mails containing malicious payloads, in an attempt to break into their computer networks to steal sensitive information.

According to the FBI’s e-scam advisory:

New Rogue! PAntispyware09

by Albin on April 16th, 2009 in Rogues, Security Alerts.

PAntispyware09 is a new rogue anti-spyware application and a clone of MsAntispyware2009. It will give exaggerated threat reports on the compromised computer, then ask the user to purchase a registered version to remove threats which do not exist.

New Rogue: Antivirus09

by LS Anders on April 14th, 2009 in Rogues, Security Alerts.

Antivirus09 (or Antivirus’09) is a new rogue that follows the normal rogue procedure. It is distributed through a web page that presents the user with a fake online scanner.

 

 

 

 

 

 

 

 

 

Buyers Beware

by Erin on March 13th, 2009 in Lavasoft Products, Security Alerts.

A word of caution to all of you online shoppers browsing the Web for the best buys: if it looks too good to be true, it just may be.

We’ve recently come across a website that is misrepresenting itself as a Lavasoft affiliate, and selling copies of our Ad-Aware Pro software that are not legitimate or supported by our company.

Scam Alert: Economic Stimulus Ploys

by Erin on March 10th, 2009 in Security Alerts, Security Tips.

Be on the lookout: a new warning has been issued to consumers about economic stimulus scams via incoming e-mail and fraudulent websites.

New Rogue! Antispyware Pro 2009

by Albin on March 6th, 2009 in Rogues, Security Alerts.

Antispyware Pro 2009 is a new rogue anti-spyware application. It will give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove threats which don't exist.

Fraudulent SMS domains!

by Albin on February 27th, 2009 in Researcher Comments, Security Alerts.

Lavasoft Malware Labs recently had a closer look on an IP range full of hoax sites. Reverse IP on 78.129.142.235 will reveal around 200 fraudulent domains which are hosted in United Arab Emirates.  Most of the sites hosted under 78.129.142.235 will use and take advantage of already existing products from the security industry and other popular software. The examples below display their way to make illegal domains look reliable.

hxxp://7zip-2009.info
hxxp://Directx-full.info
hxxp://Icq-full.info
hxxp://Messengerplus-2009.info
hxxp://Safari-full.info
hxxp://Winrar-2009.com
hxxp://Www-kaspersky.info

New Rogue: SpywareFighter

by LS Anders on February 26th, 2009 in Rogues, Security Alerts.

Today a new rogue was discovered called Spyware Fighter.  It is following the normal patterns with false detections and trying to scare the user into buying a license to clean them.

 

Further it has the classic user friendly home page available under a few similar named domains.

 

SpywareFighter was added to detection in release 0146.0017.

2 New Rogue Anti-Virus Programs

by LS Anders on February 16th, 2009 in Researcher Comments, Security Alerts.

Some new rogue anti-virus programs to be aware of...First out is XPVirusProtection with a standard looking website.

Homepage

New rogue: Antispyware3000

by LS Anders on February 5th, 2009 in Researcher Comments, Security Alerts.

Antispyware3000 is a typical rogue. It shows a lot of false positives for files that do not even exist on the drive.  However, for some reason, their full scan does not show these hits.


Antispyware3000 GUI


XP Police Antivirus

by Albin on January 28th, 2009 in Researcher Comments, Security Alerts.

XP Police Antivirus is a new rogue anti-spyware application. It will give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove threats which don't exist.

XPPoliceAntivirus

Valentine's Day Worm

by Albin on January 27th, 2009 in Researcher Comments, Security Alerts.

Win32.Worm.Waledac spreads itself using Valentine's Day "advertising" as the distribution method. It can be found on a website full of hearts with the text Guess, which one is for you? as picture 1 shows.

Picture 1

© 2009 Lavasoft. All rights reserved.