Guarding against password reset attacks with pen and paper

With the recent announcements of password breaches at LinkedIn, and warnings from Google about state-sponsored attacks on Gmail accounts, it seems like a good idea now to review some password security basics.  In this blog post, we’re going to take a look at a rather low-tech solution to a decidedly high-tech problem:  How to guard … More Guarding against password reset attacks with pen and paper

Stuxnet, Flamer, Flame, Whatever Name: There’s no good malware

A week ago the big malware news was the code known as Flame, Flamer, or sKyWIper (detected by ESET as Win32/Flamer.A), then on June 1, this news broke: “A damaging cyberattack against Iran’s nuclear program was the work of U.S. and Israeli experts and proceeded under the secret orders of President Obama.” (Washington Post)  Clearly, … More Stuxnet, Flamer, Flame, Whatever Name: There’s no good malware

Win32/Flamer: the 21st Century Whale

It’s not only the malware ESET calls Win32/Flamer.A which is complex (and certainly dauntingly large). It’s understandable that what appears to be a sophisticated threat found in in several regions, some of them particularly politically sensitive, has excited so much interest. However, conflicting conjecture and confusion over the ‘ownership’ of the detection is muddying the … More Win32/Flamer: the 21st Century Whale

Carberp Gang Evolution

In 2011 we made available a presentation from the 2011 CARO workshop in Prague about the first phases of our investigation into the Win32/Carberp cybercrime group (Cybercrime in Russia: Trends and issues). CARO Workshops are unusual in that they do not permit media to join and because they follow a strict no recording policy during … More Carberp Gang Evolution

Malware RATs can steal your data and your money, your privacy too

How serious can a malicious software infection be these days? Short answer = Very. The video below is a 16 minute answer to that question using pictures of what a malware infection looks like to the bad guy who manages to get a RAT installed on a victim machine. That’s R.A.T. for Remote Access Tool … More Malware RATs can steal your data and your money, your privacy too