veille virale

New malware spread over MSN, 1/41 positive on VT...

Veille virale

Par Philippe V.

Well this is not the first one, but at least I find it relevant since it is not being detected by (almost) any AV engines - I mean command line versions on VirusTotal. Here is what the MSN message looks like: I clicked on the link aztec-casino.uk... the...

Lire la suite

Fake McAfee DAT 5959: malware spread with Google SEO hijacking

Veille virale

Par Philippe V.

I'm not gonna deal here with the real McAfee DAT 5958 issue by itself. What I find interesting is what's coming around this incident . Some other AV vendors warned that users attempts t download the DAT that fixes the 5958 failure may be used to infect...

Lire la suite

Nouvelle propagation de code viral via MSN

Veille virale

Par Philippe V.

Une fois n'est pas coutume, je n'étais même pas en train de faire de la veille, que l'un de mes comptes MSN a reçu en rafale deux messages, de deux contacts différents. Evidemment, les contacts en question étaient censés être "hors ligne" au moment de...

Lire la suite

new tinyURL spam over MSN

Veille virale

Par Philippe V.

As you probably read on te web, at the same time people welcome new URL services such as goo.gl, others warn about new threats that come with them: bypassing URL filters using URL shorteners... Here is a kindda new sample. Once again, over the MSN Network....

Lire la suite

New Facebook fake with malware spreading, over MSN

Veille virale

Par Philippe V.

This is not the first, but I find this case quite interesting. Some PC that were formerly compromised (I don't know the malware details at the time of writing) started around 6PM UTC to send messages to their MSN contacts. Here is a sample of the message:...

Lire la suite

suspicious NetBT request teamscrew: BotNet C&C on ADSL box?

Veille virale

Par Philippe V.

I was not even really monitoring the LAN when I noticed strange requests... Why strange? because of the following: - Netbios over TCP protocol whereas the proxy should handle that kindda name resolution (part of web requests) - broadcast name query, spreading...

Lire la suite

CC number stealer, fake MSN webcam

Veille virale

Par Philippe V.

Recently, a new contact requested me to add her/him as a new MSN one. Even if I did not recognize the address, I accepted the invitation. This was for analysing purpose, I do NOT recommend any people to do the same! Anyway, here is the contact: altagraciatehney09...

Lire la suite

Zango's come back: new MSN accounts stealer?

Veille virale

Par Philippe V.

Years ago, when I started to study viral threats, I discovered Zango. Zango used viral technologies to spread and remain resident on compromised computers. I won't give a new talk about the past Zango, search engines will on their own if you wanna try....

Lire la suite

Quand McAfee publie 50% d'une attaque

Veille virale

Par Philippe V.

A few people I recently met asked me why I do write articles in English, and not (or almost not) in French. Well... the thing is Google Translation is not yet fully functional, and French used to be an international language but things change. So... voila....

Lire la suite

New campaign targetting MSN credentials | vague de vol d'identifiants MSN

Veille virale

Par Philippe V.

Well, this is not new, but it is not a reason not to talk about that, I guess. THis time, the supposed online MSN access server is hosted on the domain: come-face-the-truth.com. To be more accurate, I recently received the following MSN message, coming...

Lire la suite