BUGS

Flash EK Strikes Again via Google's DoubleClick

Flash EK Strikes Again via Google’s DoubleClick

April 16, 2015

A few days ago, we blogged about a malvertising attack on the HuffingtonPost website via a major ad network which took…

A history lesson brought to you by the Nuclear exploit kit

A history lesson brought to you by the Nuclear exploit kit

April 10, 2015

During our malware investigations, we are often learning about new techniques or ways the bad guys try to bypass us. But sometimes,…

Dell System Detect Vulnerability now classified as a PUP

Dell System Detect Vulnerability now classified as a PUP

April 3, 2015

UPDATE:After some updates of the latest versions of Dell System Detect, we have delisted this application from its previous classification as…

Compromised WordPress sites launch drive-by attacks off Pirate Bay clone

Compromised WordPress sites launch drive-by attacks off Pirate Bay clone

April 1, 2015

WordPress, the leading Content Management System, is one of cyber criminals’ favourite target when it comes to hacking websites.Contrary to some…

Xtube Exploit Led to Cryptowall Malware

Xtube Exploit Led to Cryptowall Malware

March 31, 2015

We wrote about the adult site xtube.com being compromised, redirecting visitors to a landing page for the Neutrino Exploit kit last…

Adult site Xtube compromised, serving exploits

Adult site Xtube compromised, serving exploits

March 25, 2015

Our systems have detected infections coming from popular adult site Xtube, ranked #780 in the US and with an estimated 25 million…

Hanjuan EK's 'March Madness' malvertising campaign

Hanjuan EK’s ‘March Madness’ malvertising campaign

March 24, 2015

Update: The ad network, Engage:BDR terminated the malvertising account quickly after notification, on Monday at 10:32AM. We can confirm that this…

Hard times on The Moscow Times

Nuclear EK leverages recently patched Flash vulnerability

March 19, 2015

Back in October 2014, we wrote an article about a particular malware campaign we nicknamed ‘EITest’.The actors behind it were using…

jamie

Jamieoliver[dot]com still compromised, now drops digitally signed malware

March 13, 2015

Almost one month ago we blogged about popular Chef Jamie Oliver having his website hacked and serving malware.The issue was quickly…