Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
/idata%2F2094304%2Fcapture_googleAnalytics_dynalias_070610.jpg)
Just after the Adobe and French CERTA advisories, I wanted to talk a lil bit about the website that is said to host the Adobe 0day. Here is Adobe's advisory: http://www.adobe.com/support/security/advisories/apsa10-01.html According to Symantec (see: http://www.symantec.com/business/security_response/writeup.jsp?docid=2010-060601-3020-99,...
Lire la suite/idata%2F2094304%2Fmsg_MSN_040610.jpeg)
Well this is not the first one, but at least I find it relevant since it is not being detected by (almost) any AV engines - I mean command line versions on VirusTotal. Here is what the MSN message looks like: I clicked on the link aztec-casino.uk... the...
Lire la suite/idata%2F2094304%2FRQ_Google_tolstiy.co.cc_290410.jpg)
I'm not gonna deal here with the real McAfee DAT 5958 issue by itself. What I find interesting is what's coming around this incident . Some other AV vendors warned that users attempts t download the DAT that fixes the 5958 failure may be used to infect...
Lire la suite/idata%2F2094304%2Fmsg2_MSN_180410_annonym.jpg)
Une fois n'est pas coutume, je n'étais même pas en train de faire de la veille, que l'un de mes comptes MSN a reçu en rafale deux messages, de deux contacts différents. Evidemment, les contacts en question étaient censés être "hors ligne" au moment de...
Lire la suite/idata%2F2094304%2Fmessage_msn_tinyurl_120410_annon.jpg)
As you probably read on te web, at the same time people welcome new URL services such as goo.gl, others warn about new threats that come with them: bypassing URL filters using URL shorteners... Here is a kindda new sample. Once again, over the MSN Network....
Lire la suiteIt's been a quite long time since I wanted to write this article. But taking into account the fact that I spent 3 hours at night to understand what was happening to my BIOS, I could not forget it, I guess... How did all of that started? very simple. I...
Lire la suite/idata%2F2094304%2FMSG_Skype_dreams-lady.com_250310.jpg)
Once again, I was not even expecting to get a sample that way... Here is the message I received on one of the Skype accounts I use as 'honeypots' (one day ago): I never requested in any way to receive such ads! Okay so let's go to 'dreams-lady'. To be...
Lire la suite/idata%2F2094304%2Fcapture_thebulletintrackers.com_230310.jpg){kind=tracking}
I was honestly not expecting it. I recently found out that one of my Skype accounts had received an offline message, from an unknown contact (meaning I hadn't accepted myself!) Here is a screenshot of it: At the time of writing (24 hours after I received...
Lire la suite/idata%2F2094304%2FMsg_MSN_180310_annonym.jpg)
This is not the first, but I find this case quite interesting. Some PC that were formerly compromised (I don't know the malware details at the time of writing) started around 6PM UTC to send messages to their MSN contacts. Here is a sample of the message:...
Lire la suite/idata%2F2094304%2FNortonSecScan_alert_080310.JPG)
I'd heard that Norton (I mean the last version) has improved quite a lot . It is said to be less system resource consuming, and more efficient. On my part, I spent almost 5 years cleaning computers that were supposed to be protected by Norton... (and...
Lire la suite