Malware-friendly countries
Recently there have been some studies regarding Internet hosting providers which are often used maliciously to distribute malware. As this is an interesting subject we've…
A new server hosting a Briz
VisualBreeze or VisualBriz is another malware that is usually sold in forums of malware developers, similar to the ones we mentioned in “Cybercime for sale”.…
W32/MsnPhoto.A.worm
We have found a new malware that uses instant messaging to deceive users. It arrives as an .exe file disguised as a .jpg. If you open it, you will…
Zunker that installs another Bot
One of the active servers of the Zunker we mentioned yesterday installs another bot. Although the first Zunker we talked about was configured to only…
More Zunkers!!!
Analyzing the pattern of the binary file installed by Zunker and comparing it with our samples, we have come across 32 similar files. On…
MPack uncovered!
In "Cybercrime… for sale" we promised to talk about MPack. The latest version (MPack v0.851) we have just discovered is pretty active right now as you can…
New Alanchun wave
Our large malware honeynet also known as TruPrevent© is detecting a new Alanchun wave. In a few hours we have received some hundreds of reports about this…