L3sPau1 - Slashdot User

Submission + - Rocra Espionage Malware Campaign Uncovered (threatpost.com)

Submitted by

L3sPau1

on Monday January 14, 2013 @09:25AM

L3sPau1 writes: "For five years, it hid in the weeds of networks used by Eastern European diplomats, government employees and scientific research organizations, stealing data and infecting more machines in an espionage campaign rivaling Flame and others of its ilk. The campaign, called Rocra or Red October by researchers at Kaspersky Lab, focused not only on workstations, but mobile devices and networking gear to gain a foothold inside strategic organizations. Once inside, attackers pivoted internally and stole everything from files on desktops, smartphones and FTP servers, to email databases using exploits developed in China and Russian malware, Kaspersky researchers said."

Submission + - Nvidia Display Driver Service Attack Escalates Privileges on Windows Machines (threatpost.com)

Submitted by

L3sPau1

on Thursday December 27, 2012 @01:48PM

L3sPau1 writes: "A zero-day has been found in the Nvidia Display Driver Service on Windows machines. An attacker with local access can use the exploit gain root privileges on a Windows machine. Windows domains with relaxed firewall rules or file sharing enabled can also pull off the exploit, which was posted to Pastebin by researcher Peter Winter-Smith."

Submission + - New Malware Wiping Data on Computers in Iran (threatpost.com)

Submitted by

L3sPau1

on Monday December 17, 2012 @01:04PM

L3sPau1 writes: "Iran's computer emergency response team is reporting new malware targeting computers in the country that is wiping data from partitions D through I. It is set to launch on only particular dates. While there has been other data-wiping malware targeting Iran and other Middle East countries such as Wiper and Shamoon, researchers said there is no immediate connection."

Submission + - Windows blue screen may be rootkit infection (techtarget.com)

Submitted by L3sPau1 on Friday February 12, 2010 @10:31AM

L3sPau1 writes: A rootkit infection may be the cause of a Windows Blue Screen of Death issue experienced by people who applied the latest round of Microsoft patches. It appears that the affected Windows PCs had the rootkit infection prior to deploying the Microsoft patches. Researchers investigating the issue have isolated the infection to the Windows atapi.sys file, a driver used by Windows to connect hard drives and other components. An expert identified the infection as the Tdss-rootkit, which surfaced last November and has been spreading quickly, creating zombie machines for botnet activity.

Submission + - Kaminsky interview: DNS bug a year later, DNSSEC (techtarget.com)

Submitted by

L3sPau1

on Thursday June 25, 2009 @09:45AM

L3sPau1 writes: "Network security researcher Dan Kaminsky has had a year to reflect on the impact of the cache poisoning vulnerability he discovered in the Domain Name System (DNS). In the time since, Kaminsky has become an advocate for improving security in DNS, and ultimately, trust on the Internet. One way to do this is with the widespread use of DNSSEC (DNS Security Extensions), which essentially brings PKI to website requests. In this interview, Kaminsky talks about how the implementation of DNSSEC would enable greater security and trust on the Net and provide a platform for the development of new security products and services."

Slashdot Top Deals