Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
Je m'attendais à tout autre chose en lisant le sujet du courriel... Subject: La photo de votre profil est belle From: "Lacie Peterson"
While trying o get the official "uptime" tool from MS's website (http://support.microsoft.com/kb/232243 ) I had a surprise. The file got detected by the automatic AV scan which is shipped with IE9 (ie: Windows Defender). And the VirusTotal's results are...
Lire la suite
That trick was really about to get me... The bot would realy make you believe it is your Facebook contact talking to you, but it is not... I sent the URL to VirusTotal, here are the results: nothing to worry about... URL Analysis tool Result Avira Clean...
Lire la suite
Here is a screenshot of the message spreading: The real URL is being displayed in the status bar. I personaly used DynDNS some time ago... anyway. This malware did trigger an alert from: - Kaspersky - IE 9 Smart screen filter But the thing is, Kaspersky...
Lire la suiteEn fait, le lien pointe sur: http://199.16.130. 102/~vlallala/vbv2012/authentification/VerifierVisa/ NB : le lien ne semble plus marcher actuellement... Bilan du filtrage par les navigateurs : - Firefox 5: alerte "page contrefaite" - IE9, avec module...
Lire la suite
Courriel reçu le 01/07/2011 03:48 : Objet : Video intimo de Deborah Secco com jogador Roger cai na internet! Assista com exclusividade o video que pode retirar a atriz da novela Insensato Coracao Texte : http://noticias.terra.com.br/mundo/noticias/0-OI5211810-EI8141-00-Video-intimo-de-Debora-Secco-e-Seu-Marido-Roger-Flores-e-Divulgado-na-Net.html-0.11290...
Lire la suite
Message reçu le 20 juin à 6h09 : Vous avez reçu un nouveau message privé. Cliquez ici pour lire votre message. Ce message a été généré automatiquement Crédit Agricole 2011 En fait, le lien pointe sur : http://www.seko-gyoseishoshi. net/.credit-agricole.fr/...
Lire la suiteEchantillon reçu il y a quelques temps : CE MESSAGE EST DE NOTRE ÉQUIPE DE SOUTIEN TECHNIQUE Ce message est envoyé automatiquement par l'ordinateur. Si vous recevez ce message, cela signifie que votre adresse e-mail a été mis en attente pour la désactivation,...
Lire la suiteI have been working on computers viruses for a few years... but when I say "computer virus/threats", I do not only talk about Wintel/x86 ones. Thus I also had to fight against the “well known” idea that MacOS has no virus, no threats . Even worse, 5 years...
Lire la suiteI was just looking for Google images of an american actor of a serie. Then my browser was trapped, as one of the Google Image results lead it to: http://www.google.fr/imgres?imgurl=http://www.celebritylatest.com/wp-content/uploads/premieres/marg_helgenberger_mr_brooks_premiere_3.jpg&imgrefurl=http://www.mainstream.fr/img/-%%%%%-dating.html&usg=__grAZHQrnfxcFdhmvNprdLlOKD70=&h=808&w=1000&sz=70&hl=fr&start=17&sig2=jTOL3-NJ0X06PCeKxHJQ0Q&zoom=1&tbnid=SBAcGCvMS_01OM:&tbnh=120&tbnw=149&ei=KJXZTYXXMoub-gbgwuHGAQ&prev=/search%3Fq%3D...
Lire la suite