Threat Spotlight Archive

For the week of: 27 Dec 2010

• Java Applet exploit drops payload
• Not a parcel delivery failure notice, but a Trojan
• Malicious script downloads Java applet

For the week of: 20 Dec 2010

• Zbot campaign: Nude LinkedIn photos
• Yuletide pharmacy and Replica spam with greeting subject lines
• Worm spreads by fake Amazon shipping email

For the week of: 13 Dec 2010

• More Bredo spam
• Almost a year later, Conficker still lurking
• Malware lures users to download fake anti-virus

For the week of: 06 Dec 2010

• Worm copies itself to hidden directories
• Malware hides in the Recycle Bin
• JavaScript triggers vulnerability in unpatched Adobe Reader

For the week of: 29 Nov 2010

• Fake AV uses protection program to delay detection
• Spam attachment looks for DLL before running
• Yet another Trojan downloader

For the week of: 22 Nov 2010

• Malicious application targets Facebook users
• Free web host abuse leads to more spam
• Fake FedEx email delivers fake AV

For the week of: 15 Nov 2010

• Java Applet exploit drops payload
• Fake video file redirects to infected webpage
• Trojan dials in to a remote server

For the week of: 08 Nov 2010

• A Firefox exploit in the wild
• Facebook Trojan targets Macs
• Autorun worm clickjacks traffic

For the week of: 01 Nov 2010

• Trojan disables your security on download
• Facebook likejacking Trojan a nuisance
• Fake MySpace emails steal password information

For the week of: 25 Oct 2010

• Trojan hides itself like a rootkit
• Spam targets online tax payment services
• Trojan directs users to install Fake AV

For the week of: 18 Oct 2010

• Email spam with Trojan attachment
• Postal scareware delivers malware
• Trojan redirects traffic from compromised legitimate websites

For the week of: 11 Oct 2010

• Malware injects into Internet Explorer to download more
• Fake but convincing LinkedIn email alert
• Another ZBot Trojan uses fake resume lures

For the week of: 04 Oct 2010

• Fake resume attachment installs malware
• Image-based spam a popular ploy
• Remote-loading Trojan sneaks in by email

For the week of: 27 Sep 2010

• Mass-spammed redirects sends malicious JavaScript
• Spammed PDFs hide embedded malicious JavaScript
• Malware lures users to download fake anti-virus

For the week of: 20 Sep 2010

• Delivery error spam uses fake PDFs
• The 'Here you have' worm uses multi-pronged attack
• Trojan exploits zero-day Adobe Acrobat/Reader vulnerability

For the week of: 13 Sep 2010

• Poisoned pages push users toward FakeAV
• Emailed Trojan drops malware
• Trojan installer invades System folder

For the week of: 06 Sep 2010

• Bredo spam uses password-protected .zip files
• Archive hides malicious Java class file
• Worm exploits Windows' Autorun feature to infect removable devices

For the week of: 30 Aug 2010

• Trojan downloads and executes files
• Malicious Perl script targets Linux/Unix boxes
• Fake webpage security scan hides a Trojan

For the week of: 16 Aug 2010

• Worm spreads via removable drives
• Trojan takes down internet security settings
• Spammed malware comes with extra Bredo

For the week of: 09 Aug 2010

• Enticing subject lines, malicious attachments
• Old Trojan makes a reappearance
• Jailbreaking your Apple device? Think twice

For the week of: 02 Aug 2010

• FakeAV email spam
• Fake free VirusScan
• Morphing degree mill spam

For the week of: 26 Jul 2010

• Worm exploits Windows Shortcut Vulnerability
• Windows Shortcut Vulnerability keylogger
• Spam drops malicious downloaders

For the week of: 19 Jul 2010

• Malicious shortcut uses unpatched Windows exploit
• Worm sniffs for Siemens SCADA passwords
• Wordpress JavaScript hack pushes FakeAV

For the week of: 12 Jul 2010

• FakeAV generates fake landing page
• More Bredo spam
• Insidious HTML files defy wary users

For the week of: 05 Jul 2010

• PayPal phish spam abounds
• Fake phone bill drops malware
• Car tax spam

For the week of: 28 Jun 2010

• Smartphone Trojan sends expensive texts
• Fake attached Word file houses Trojan
• Malware tricks digital signature checks

For the week of: 21 Jun 2010

• Corrupt PDFs drop more malware
• Trojan hides in fake MS Word spam attachment
• Koobface variant changes its tactics

For the week of: 14 Jun 2010

• "Degree mill" messages: Classic spam
• Malware exploits Java vulnerabilities
• Common spam hides keylogger Trojan

For the week of: 07 Jun 2010

• Trojan drops affiliate network malware
• Animation exploits zero-day Flash vulnerability
• Malware drops through corrupt PDF files

For the week of: 31 May 2010

• Facebook likejacking Trojan a nuisance
• Pill spam uses new tricks
• Clean files point to malicious sites

For the week of: 24 May 2010

• Trojan bot kit spreads via Twitter
• Don’t watch that video, it’s a Trojan
• Keylogger copies itself to removable devices

For the week of: 17 May 2010

• Trojan disables your security on download
• Threat uses job-seeking hopes to hide
• Fake AV Trojan installs even more fake AV

For the week of: 10 May 2010

• Insidious worm replaces executable files
• Malware lures users to download fake anti-virus
• IFrame-based attack redirects browsers to malware host sites

For the week of: 03 May 2010

• Fake Twitter notifications phish for data
• The latest incarnation of Koobface
• PDF JavaScript exploit harbors malware

For the week of: 26 Apr 2010

• Scareware on the rise
• Infected svchost.exe and iexplore.exe files load malicious code
• Malicious email Trojan drops more malware

For the week of: 19 Apr 2010

• Worm exploits Windows' Autorun feature to infect removable devices
• Bredo Trojan rears its ugly head again
• Trojan exploits PDF reader weakness

For the week of: 12 Apr 2010

• Unwanted application changes search engine settings
• Fake Facebook emails steal password information
• American business email list spam

For the week of: 05 Apr 2010

• Sinowal's complex algorithms spread malicious content
• Harmless-looking JPGs conceal worms
• Fake plane ticket spam hijacks your system

For the week of: 29 Mar 2010

• Tax season means tax spam
• Compromised websites serve up Trojan downloaders
• Fake lawsuits hide real malware

For the week of: 22 Mar 2010

• Redirect script exploits weak FTP credentials to hijack websites
• You still aren't getting a Sony VAIO
• Free downloads aren't always what they seem

For the week of: 15 Mar 2010

• Password-stealing worm targets online gamers
• New Internet Explorer zero-day exploit
• Trojan distributed by new IE zero-day

For the week of: 08 Mar 2010

• More FakeAV hides in encrypted attachments
• Energizer USB charger malware
• "Canadian" pharmacy spammers moving from China to Russia

For the week of: 01 Mar 2010

• Malware lures users to download fake anti-virus
• Malware squats on domain name typos
• Fake package delivery or password reset messages trick users

For the week of: 22 Feb 2010

• Fake Conficker alert hides malware
• Russian spam campaign
• DHL delivery notice drops malicious .exe file instead

For the week of: 15 Feb 2010

• Fake AV uses e-cards as vehicle for malware distribution
• Celebrity rumors used by SEO hackers
• Malcious pdf exploits Adobe vulnerabilities

For the week of: 08 Feb 2010

• Almost a year later, Conficker still lurking
• E-mail threat turns your computer into a spam machine
• Anti-virus scanner? Nope, it's a Trojan

For the week of: 01 Feb 2010

• Fake IQ program a test of your malware savvy
• Fake AV finds different ways to scare users into scams
• New Canadian Pharmacy spam

For the week of: 25 Jan 2010

• Adobe Reader exploit a ubiquitous threat
• Trojan leads to drive-by downloads
• Spam hides Bredo malware

For the week of: 18 Jan 2010

• Operation Aurora: Coordinated malware attack
• Cousin of Virtumundo patches in to remote sites
• Malicious code hides in PDF files

For the week of: 11 Jan 2010

• Widespread fraud against World of Warcraft players
• Trojan hijacks sites with weak FTP credentials
• Fake MySpace emails steal password information

For the week of: 04 Jan 2010

• Stubborn Internet Explorer toolbar hard to remove
• Christmas card email attachment really a malware attack
• Fake browser plug-in exploits holiday cheer