CyberCriminals uses CNN Open Redirect vulnerability

Spammers uses open redirect vulnerability in CNN Web site.

Founder of E Hacking News Sabari Selvan has revealed a new campaign by sending out spam to Twitter. According Selvana, cybercriminals send out from your account unsolicited messages (spam), contain links to Internet sites that advertise dubious diet.

The most striking is the fact that spammers are actively using open redirect vulnerability on CNN and Yahoo. Thus, by following the link, the victim is redirected to the advertised site cybercriminals from the official website CNN and Yahoo.

Malicious software attacks networks of companies every three minutes

The company FireEye published studies, according to which networks the majority of commercial structures every three minutes under attack of malicious programs.

In this case, according to FireEye, networks of most companies working in the field of high technology, have been attacked by malicious programs every minute. Eksperty FireEye note that the most common method of introducing malware is targeted (directed) phishing.

The results of studies presented in the 2H 2012 Advanced Threat Report, suggests that in order to get potential victims to launch malware, cybercriminals often use ordinary business terminology, such as "UPS". In this case, 92% of malware attached to e-mails in a ZIP archive. In the study, experts from FireEye also consider methods that allow attackers to introduce malware into networks of victims and avoid detection by their defense. In particular, are malicious programs which are activated only when moving the mouse.

FireEye experts also point out that to date, the creators of malicious spared no effort trying to create malware that can bypass any existing security system, which, moreover, are often morally and technically outdated.

Given all of the above, We advise commercial entities and other organizations in a timely manner to carry out upgrades to protect corporate networks and strategies for their protection.

Link:
http://www.fireeye.com/news-events/press-releases/read/advanced-cyber-attacks-occur-up-to-once-every-three-minutes

Cybercriminals offer to purchase 10,000 botnetss from the U.S. for just $ 1000

Webroot specialist company was able to identify a dedicated website where virtually anyone wishing to offer to purchase a ready-botnet. At the same time the most expensive cybercriminals evaluate bots, located in the U.S..

According to reports, 1,000 infected computers will cost $ 120 (€ 93), 5000 PC - $ 550 (€ 423). The most discerning buyers are offered to purchase 10,000 infected computers located in the U.S., only $ 1,000 (€ 770), less demanding clients buy bots, located in the territory of Canada, Germany and the UK. In this case, 10,000 bots will cost the buyer $ 600 (461 euros).

But those who are totally indifferent to the country in which they are acquired infected devices offered to purchase 10,000 botnets for just $ 200 (€ 159).

MiniDuke - a new cyber-espionage tool

Kaspersky Lab has published a report on the study of a number of incidents that took place last week, and yet another example relating to cyber espionage against government agencies and research organizations around the world.

During an attack used a combination of sophisticated malware "old school" virus writers and new advanced technologies for vulnerabilities in Adobe Reader - and all this in order to get the data from the geopolitical nature of the organizations.

Malicious program MiniDuke spread by a recently discovered exploit for Adobe Reader (CVE-in 2013-6040). According to a study conducted by Kaspersky Lab in cooperation with the Hungarian company CrySys Lab, among victims kibershpionskoy MiniDuke programs were state institutions of Ukraine, Belgium, Portugal, Romania, the Czech Republic and Ireland. In addition, the actions of cyber criminals suffered Research Institute, two scientific issledovatelskiyh center and medical facility in the United States, as well as research fund in Hungary.