Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- Michael Jackson's death themed malware campaigns spreading
- The sudden death of Michael Jackson quickly opened a window of opportunity for cybercriminals to capitalize on. With a malicious spam campaign, blackhat SEO search results poisoning which is serving scareware within the first 100 search results for Michael Jackson's death, and an opportunistic participant in Zango...
- Tags: Malware, Social Engineering, Spam, Michael Jackson, Malware Campaign, Cyberthreats, Spyware, Adware & Malware, E-mail, Viruses And Worms, Security, Online Communications, Dancho Danchev
- Blog posts 2009-06-26
- Fake Microsoft patches themed malware campaigns spreading
- Researchers from Computer Associates (NASDAQ:CA) and Sophos are reporting on three currently active malware campaigns using fake Microsoft patch themes as a social engineering tactic to spread over email. The first one is spreading as an "Important Windows XP/Vista Security Update" and is offering a bogus Conficker...
- Tags: Patch Management, Malware, Social Engineering, Microsoft Corp., Malware Campaign, Spyware, Adware & Malware, Cyberthreats, Microsoft Outlook, Viruses And Worms, Security, Microsoft Office, Office Suites, Software, Dancho Danchev
- Blog posts 2009-06-18
- Mac OS X malware posing as fake video codec discovered
- Researchers from ParetoLogic are reporting on a newly discovered Mac OS X malware variant posing as fake video ActiveX object found at a bogus Macintosh PortTube site. The use of fake video codecs is a social engineering tactic exclusively used by malware targeting Windows, and seeing it...
- Tags: Video Codec, Apple Macintosh, Malware, Social Engineering, Video, Spyware, Adware & Malware, Cyberthreats, Apple Mac OS X, Apple Mac OS, Viruses And Worms, Security, Operating Systems, Software, Dancho Danchev
- Blog posts 2009-06-11
- Infiltrating WALEDAC Botnet's Covert Operations: Effective Social Engineering, Encrypted HTTP2P Communications, and Fast-Fluxing Network
- The WALEDAC botnet has been involved in an almost continuous spate of spam runs since researchers discovered it in December 2008. Their creators routinely take advantage of various real-world events and occasions, using them as social engineering ploys to trick users into performing certain actions. This botnet has the ability...
- Tags: Trend Micro Inc., Social Engineering, WALEDAC Botnet
- White papers 2009-06-01
- 56th variant of the Koobface worm detected
- Researchers from PandaLabs are reporting on the detection of the 56th variant of the Koobface worm (Boface.BJ.worm), spreading across Facebook, Tagged, Friendster, MySpace, MyYearBook, Fubar.com, Hi5 and Bebo since May, 2008. According to the company, the growth of Koobface related infections is as high as 1,200% since...
- Tags: Infection, Malware, Social Engineering, Worm, MySpace, Koobface, Cyberthreats, Social Networking, Spyware, Adware & Malware, Web Site Development, Security, Viruses And Worms, Online Communications, Marketing, Advertising & Promotion, Internet, Dancho Danchev
- Blog posts 2009-05-15
- Is It Too Late for PAKE?
- The most common web authentication technique in use today is password authentication via an HTML form, where a user types her password directly into a web page from the site to which she wishes to authenticate herself. The problem with this approach is that it relies on the user to...
- Tags: Password, Social Engineering, SSL Certificate, Ssl/Tls, Network Security, Security, Networking
- White papers 2009-05-02
- Brian Brushwood: Scams, social engineering and straightjackets
- Brian Brushwood: Scams, social engineering and straightjacketsIdiots spew private data and pictures on the webAgain, only a fool spews all of their private data to sources they do not own.Keep putting your data out there, it will be used against you in ways you have not thought of like identity...
- Tags: private data, Brian Brushwood, social engineering
- Discussion threads 2009-03-15
- Brian Brushwood: Scams, social engineering and straightjackets
- Brian Brushwood attempting to escape from a straightjacket At the live taping of Revision3's Diggnation, Brian Brushwood Twitter opened the show with his legendary magic show. Brushwood is on another Rev3 show called Scam School, where he shows you how to outsmart someone either on the streets...
- Tags: Social Engineering, Trick, Brushwood, Andrew Mager
- Blog posts 2009-03-15
- Malware campaign at YouTube uses social engineering tricks
- Malware campaign at YouTube uses social engineering tricksEven largest sites have simple weaknessesI am really surprised at the ease with which such attacks can be performed. At any rate, the porn links can be easily hunted down and erased by the Youtube backend softwareOn the other hand, seeding the comments...
- Tags: Cyberthreats, Spyware, adware & malware, SECURITY, YouTube Inc., social engineering trick, social engineering, malware
- Discussion threads 2009-02-25
- Malware campaign at YouTube uses social engineering tricks
- Remember last month's Google Video search results poisoning attack which was hijacking legitimate YouTube titles in order to acquire potential traffic coming from Google Video? Or the massive comment-spam attack on Digg.com? It appears that the cybercriminals behind both of these campaigns aren't giving up just yet,...
- Tags: Google Video, YouTube Inc., Malware, Social Engineering, Video, Spyware, Adware & Malware, Cyberthreats, Corporate Communications, Security, Marketing, Dancho Danchev
- Blog posts 2009-02-25
- AutoPlay - Fun and social engineering
- AutoPlay - Fun and social engineeringAbout 9m reasons to fix itIf you believe F-secureWhat is the proposed fix?Should Windows 7 detect icons that look like a folder and prevent developers from creating titles that say "Open folder to view files"?Besides, Windows no longer defaults the user to running as root...
- Tags: Firewalls, Operating systems, Cyberthreats, Windows Server Service, UAC, Microsoft Windows, Microsoft Windows Server, firewall, social engineering
- Discussion threads 2009-01-19
- AutoPlay - Fun and social engineering
- This is something that Microsoft needs to fix in Windows 7. by Adrian Kingsley-Hughes
- Tags: Microsoft Windows 7, Social Engineering, Downadup, Microsoft Windows, Operating Systems, Software, Adrian Kingsley-Hughes
- Blog posts 2009-01-19
- Four XSS flaws hit Facebook
- Project XSSed, the clearing house for cross site scripting flaws has just released details on four flaws affecting Facebook's developers page, iPhone login page and the new users registration page, potentially assisting malicious attackers into adding more legitimacy to their campaigns. With yet another critical XSS flaw hitting Facebook in...
- Tags: Social Networking, Facebook, Flaw, XSS, Malware, Social Engineering, Security, Dancho Danchev
- Blog posts 2008-12-15
- US-CERT: Beware of airline ticket e-mail scam
- The United States Computer Emergency Readiness Team (US-CERT) has issued an alert for an e-mail scam targeting holiday travelers, warning that malware authors are using clever social engineering tactics to hijack Windows computers. In the e-mail scam, users get a .zip file attached to a message about...
- Tags: Malware, Social Engineering, US-CERT, E-mail, Viruses And Worms, Online Communications, Security, Ryan Naraine
- Blog posts 2008-12-12
- Fake Windows XP activation trojan goes 2.0
- Known as Kardphisher and "in the wild" since April, 2007, last week the malware author of this trojan horse mimicking the Windows XP activation interface while collecting the credit card details the end user has submitted, has made significant changes to visual interface and usability of the trojan, consequently improving...
- Tags: Microsoft Windows XP, Credit Card, Trojan Horse, Malware, Social Engineering, Microsoft Windows, Spyware, Adware & Malware, Spyware, Sales Channel, Viruses And Worms, Financial Services, Security, Sales, Dancho Danchev
- Blog posts 2008-11-18
- The Changing Face of Vulnerabilities
- Although social engineering does not play a role in all forms of security threats, McAfee Avert Labs has observed a growing trend recently: malware writers using social engineering to exploit software vulnerabilities. With the recent trends in vulnerabilities, social engineering is a force that is difficult to combat. No matter...
- Tags: McAfee Inc., Vulnerability, Social Engineering
- White papers 2008-10-09
- The Origins of Social Engineering
- One would be hard pressed today to read a news article or book about computer security without coming across the term social engineering more than once. The term phishing was coined by hackers. It derives from fishing because this social engineering technique lures its victims phish into disclosing their user...
- Tags: Social Engineering
- White papers 2008-10-09
- Targeted malware attack against U.S schools intercepted
- Timing is everything, and from a cybercriminal's perspective, a new school year means segmenting their email databases to launch a targeted attack welcoming everyone back online. According to MessageLabs Intelligence : "Starting in early September, MessageLabs intercepted a targeted, email-borne malware attack on US schools and government organizations, a...
- Tags: Malware, Social Engineering, Attack, E-mail, Spyware, Adware & Malware, Cyberthreats, Security, Viruses And Worms, Online Communications, Dancho Danchev
- Blog posts 2008-09-17
- Fake CNN news items malware campaign spreading rapidly
- A currently active malware campaign taking advantage of a known social engineering tactic, namely, to entice the spammed user into clicking on a site with a fake news item in order to trick them into installing a fake Flash player (flashupdate.exe; get_flash_update.exe and watchmovie.mpg.exe), was massively spammed last night, with...
- Tags: malware, social engineering, cnn, spyware, adware & malware, cyberthreats, e-mail, viruses and worms, security, online communications, dancho danchev
- Blog posts 2008-08-06
- Twitter being used to distribute malware
- Last week, when I wrote about Aviv Raff's auto follow-me vulnerability on Twitter, I warned that it was only a matter of time before we see nasty social engineering malware attacks on the popular microblogging service. Well, it's here. Malware hunters at Kaspersky Lab...
- Tags: Malware, Social Engineering, Twitter, Spyware, Adware & Malware, Cyberthreats, Corporate Communications, Viruses And Worms, Security, Marketing, Ryan Naraine
- Blog posts 2008-08-04
White Papers and Webcasts