Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Mailbag - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Mailbag
On what otherwise (so far :-) seems to be a slow news day, here's a couple of items that popped up in the ISC inbox today:
  • MS released an "Office 2004 for MAC 11.2.5" update a couple of days ago. If you are not using "auto update", manually installing this one might be worthwhile. "An attacker can overwrite your computer's memory with malicious code", now isn't this ample enticement to patch ...
  • A cute little Phish Mail that claims to come from the IRS (Internal Revenue Service) who are desperately trying to refund some money directly to your Visa card. All they need is your Social Security Number and the Visa card #.  And, incidentially, IRS processing seems to be done in Romania (hxxp://ap[dot]ro) nowadays. Outsourcing, most likely :-)
  • You didn't order a copy of SpyDoctor? Well, your credit card is going to be charged anyway, unless you open the attachment to find out the details. The attachment in question is now being detected as Trojan-Downloader-AJK by Sophos.
    [Note: This entry is not about SpyWARE Doctor by PCTools, which is one of the "good" tools]

In other words, just like any other day on the *net.
-daniel
Daniel

367 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!