Jay Munro

The past few weeks we have seen a shift in the threat landscape from bothersome worms with performance-killing propagation, to a rash of financially motivated Trojans and phishing attempts. According to BitDefenders real-time threat report , nine out of ten threats infecting systems were, as of Saturday, July 3rd, Trojans. While Netsky.P is still the […]

While no attacks have been documented, Secunia reports that iDefense and eEye Digital Security have found a highly critical flaw in RealPlayer. Several versions of RealOne and RealPlayer have been found to have a buffer overflow vulnerability that could allow remote execution of arbitrary code on a victims system. RealNetworks has confirmed the problem and […]

Its been another busy week, with several new LSASS (MS04-011 security bulletin) vulnerability-exploiting worms appearing. Since Sasser opened the door, weve seen over a half a dozen new names, and several versions of each– Cycle, Gaobot, Bobax, Korgo, Kibuv, and Sdbot. Gaobot and Wallon worms also attempt to exploit Windows vulnerabilities from earlier security bulletins. […]

Its been another busy week, with several new LSASS vulnerability-exploiting worms appearing. Since Sasser opened the door, weve seen more than a half a dozen new names and several versions of each—Cycle, Gaobot, Bobax, Korgo, Kibuv and Sdbot. The Gaobot and Wallon worms also attempt to exploit Windows vulnerabilities from earlier security bulletins. But the […]

ZIFFPAGE TITLEAt a Glance Company:Symantec Corp., www.symantec.comPrice:10 to 24 users, $66.70 per seat; volume pricing available Pros:Strong antivirus, firewall, and intrusion detection features. Settings offer precise control for administrators.Cons:Can grow pricey for large deployments.Bottom line:Symantec Client Security 2.0 provides a strong defense for PC users on your network. With its easy-to-use interface, clear documentation, and […]

A powerful worm known variously as w32/Novarg.A, w32/Shimg, w32/Mydoom, or w32/Mimail.R began devastating personal and corporate e-mail systems across the globe in late January. This fast-moving, mass-mailer Internet worm apparently started spreading on the popular peer-to-peer file-sharing application Kazaa and then moved to e-mail. The virus overwrites certain system files, e-mails itself to every e-mail […]

This past Friday also brought a new Bagle variation (what else is new?). W32/Bagle.U-mm brings up the Windows Hearts card game when it infects. Bagle.U comes with blank message body, and a randomly named .EXE attachment. Like other Bagles, it opens a back door, and attempts to contact various web servers. It has been rated […]

After a couple of weeks of sparring, the Netsky vs. Bagle war has slowed down, though the latest Bagle.N/M variety has turned more nasty. Several new Netsky variants (Netsky.K, Netsky.L, Netsky.M) emerged, but had relatively low impact. Netsky.B and NetskyD are still topping the threat lists, especially due to their human engineering. Over the weekend, […]

The past week has almost had a dance rhythm – Bagle Bagle, Netsky, Netsky, Bagle, Bagle, Mydoom, cha cha cha. One after another, Bagle, Netsky and Mydoom have been competing to infect your desktop. Over the weekend and throughout the week weve seen been more than a dozen versions of these worms. W32/Bagle.J-mm and W32/Bagle.K-mm, […]

When it rains it pours. Wednesday Feb 25th brought a new version of Netsky. Similar in operation to Netsky.B, but with a wider pool of message, subject line and attachment possibilities, W32/Netsky.C-mm jumped to a medium threat on Symantec, McAfee and Sophos charts, and to a full scale alert with TrendMicro by Thursday afternoon. Not […]

The only thing scarier than this viruses name is its potential for damaging millions of PCs. What a week! W32/Bagle.B-mm started off the week with a bang, spreading with Sobig.F like speed, hitting a 1-in-16 virus-to-message ratio at MessageLabs, but quickly petering out as word got around. The easy to remove, Bagle.B,like its January predecessor, […]

On Tuesday February 10th, Microsoft released three new security updates to patch new vulnerabilities, one of which is catching a lot of attention. Security Update MS04-007 is rated as critical because it has the potential to leave a user of Windows NT, 2000, XP or 2003 Server open to an attack that could result in […]